KR20000010820A - Method and device for mobile telephone supervision - Google Patents

Abstract

PURPOSE: A device for mobile telephone supervision is provided to identify an unauthorized user of a mobile telephone(M) that includes a terminal identity and a chosen security code(PINI). CONSTITUTION: A unit suggests insertion of a security code automatically when the user card is inserted in the mobile communication unit. The user enter code into his/her mobile communication unit. If a entered security code is error, if a terminal identity or a user identity does not match, the mobile communication unit automatically sends her/his terminal identity or user identity of inserted user card to service code. The service node(F) is able to obtain personal user information from the database(D2) of the operator(P2) relating to the unauthorized user(A2) of the mobile telephone(M), via the SIM identity(s2).

Description

Method and apparatus for supervising mobile phones

User cards that must be used with the mobile communication unit in the order in which the mobile communication unit is functional with a specific user identity are known to be disclosed as each mobile communication unit. The user card allows the subscriber to be associated with a particular operator.

Each mobile communication unit, for example a mobile phone or a cordless phone, has a terminal identity. The terminal identity may be the serial number or serial number of the unit called in the GSM system which is the European mobile telephony communication system as the IMEI International Mobile Equipment Identity. The IMEI identity is stored in the circuit of the mobile communication unit and is not easily accessible. The above-mentioned user identity belonging to a specific user card is called in GSM system as IMSI identity (International Mobile Subscription Identity).

In the GSM system, the user card is called as SIM-card and the IMSI identity is also called as SIM-identity.

When the owner of the mobile communication unit wishes to join the mobile communication unit, the user applies to the operator to purchase a SIM card. The card entitles the user to use the operator subscription service through which the mobile communication unit can use the network belonging to the operator.

In a user application, the owner refers to the terminal identity of the user's mobile communication unit along with personal information such as name, address, telephone number, personal identification number, which information is stored by the operator in a database or similar device. The operator can also store information about those services used by the new owner in the same location. Services such as call charging are performed on the user card, for example.

The operator assigns a specific user identity to a SIM card, the so-called SIM identity, which relates to the owner information stored in the database. The user identity also includes a specific identification code that identifies the operator managing the subscription to which the SIM-card is associated.

Swedish patent No. 9333335-1 teaches a mobile communication unit that can identify its owned user card from another user card.

If a mobile communication unit belonging to an authorized user is stolen by an unauthorized user, the authorized owner reports the theft to an operator managing the subscription used by the stolen mobile communication unit. The operator can block the user card in the stolen unit so that the unit can no longer be used with the blocked user card.

An unauthorized user can replace an existing user card in that unit with another user card assigned to the user identity to access the stolen mobile communication unit. An unauthorized user can set up a call connection on a subscription belonging to a new user card via a stolen mobile communication unit.

In order to render the unit unusable, the use of a mobile communication unit stolen by an unauthorized user is known to be prevented by blocking the theft unit upon request from the owner. In that case, the mobile communication unit is installed in an authenticator that can be used by the operator to block the unit to prevent its use.

Another way to prevent an unauthorized user from using a stolen mobile communication unit is to allow a new code to be keyed in when a user card is replaced with a new user card in the order in which the new user card will function with the mobile communication unit. Require. Otherwise, the mobile communication unit cannot be used.

Even if an unauthorized user is anonymous, it is possible to prevent unauthorized users from using the mobile phone. Therefore, it is impossible to insure the mobile communication unit at present because the number of theft mobile theft units increase. Guaranteed mobile communication units incur a large amount of damages to each guarantee company.

Patent specification WO 95/26115 describes a mobile phone that can be used when the IMSI identity of a SIM-card inserted into the mobile phone matches the identity previously stored in the mobile phone. The mobile phone compares the two identities and blocks the additional use of the mobile phone when the identities do not match.

Therefore, the operator can confirm that the mobile phone can only be used as a SIM card belonging to the operator, which SIM-identity matches the identity previously stored in the mobile phone. When the user replaces the SIM card with an unauthorized SIM card, the mobile phone is blocked for additional use.

U.S. Patent Specification 4,843,385 teaches radios that can be blocked by wirelessly keying the security identity. The radio becomes inoperable in that blocked state and therefore cannot be used. In order not to block the radio, it is necessary to enter the correct identity. Otherwise, the radio automatically sends a message to the operator with the identity of the radio, indicating that the wrong identity has been keyed in, so that an appropriate measurement can be obtained.

The present invention relates to a method and apparatus for identifying a user of a mobile communication unit.

1A is a schematic illustration of a communication network of the present invention.

1B is a graphical illustration of a database storage field for storing data in accordance with the present invention.

2 is a block schematic diagram of a mobile telephone and a service node in accordance with the present invention;

3 is a flow chart illustrating a method of the present invention.

4 is a signaling diagram illustrating signaling between a mobile telephone and a service node in accordance with the present invention.

The present invention relates to the problem of determining whether a user of a user card is authorized to use the card in a set communication unit. The confirmation is carried out without the user of the mobile communication unit being aware of the confirmation.

Another problem related to the present invention is that it allows the unauthorized user of the mobile communication unit to identify without warning the unauthorized user in advance.

It is therefore an object of the present invention to ascertain whether a user of a mobile communication unit is authorized to use his user card at that unit and to set the identity of an unauthorized user of the mobile communication unit. It occurs without the user of the mobile communication unit or an unauthorized user being aware of the procedure.

For this purpose, it is proposed according to the invention that the unit automatically requests the insertion of a security code when inserting a user card into a mobile communication unit. The user enters the code into his mobile communication unit. If the security code entered is an error and the terminal identity and the user identity do not match with each other, the mobile communication unit automatically sends its own terminal identity and the user identity of the inserted user card to the service code.

The service node may be an endorsement company in which the mobile communication unit is guaranteed, or it may be an operator responsible for the subscription to which the user card is associated. Information related to the user identity obtained from the mobile communication unit can be used at the service node to take appropriate action, for example, to track unauthorized users.

Also, in particular, the problem is caused by entering into the unit a security code selected by the authorized owner when the user card is located there by an authorized owner of the mobile communication unit that defines the identity of the user card with which the mobile communication unit functions. Resolved. It automatically associates the user identity of the user card with the terminal identity to establish a specific relationship between them.

The mobile communication unit automatically requests a security code each time a user card is placed in the unit. If the security code entered in response to the request is incorrect, or if the code is not entered into the unit, the unit compares the user identity belonging to the inserted user card with the terminal identity. If the identity does not show the particular correlation mentioned above, the mobile communication unit stores the user identity and automatically sends two identities to the service node. The mobile communication unit stops the user of the mobile communication unit from recognizing the procedure and repeats the transmission of the stored user identity and terminal identity until the mobile communication unit receives the response signal from the service node. The service node confirms receipt of the user identity and the terminal identity sent by the mobile communication unit by sending a response signal to the communication unit.

Upon receipt of the response signal, the mobile communication unit stops transmitting the stored user identity and the terminal identity and deletes the stored user identity.

The service node can obtain information coupled to the user identity by contacting the operator of the subscription used by the user card in the mobile communication unit, thereby identifying the user of the user card inserted in the unit.

One advantage provided by the present invention is that unauthorized users can be tracked without being aware of what is happening and without blocking the unit. It is a mobile communication unit that automatically sends a user identity and a terminal identity to a service node.

Because the mobile communication unit repeatedly transmits the stored user identity and terminal identity when a mismatch is found until a response signal is obtained without the user of the unit knowing that it is occurring, the user is temporarily in a wireless-shielded place. Even if located, information about the user identity and the terminal identity stored in the unit are eventually received at the service node.

Another advantage is that the mobile communication unit is currently assured because it can track unauthorized users. The present invention can also be used by the service node to ensure that everything is in order by contacting the authorized owner of the unit to confirm that an error is made, for example in case of confusion between user cards. Another advantage provided by the present invention is that the mobile communication unit can be marketed by the operator safely in theft, because an unauthorized user who is aware of the manner of handling the electronic components of the present invention is not interested in owning such a mobile communication unit. Because it does not.

The present invention is explained in more detail with reference to the preferred embodiments and with reference to the accompanying drawings.

FIG. 1A illustrates a structure of a communication network including one or more wireless communication networks, such as a first wireless communication network RN11, a second wireless communication network RN12, a third wireless communication network RN13, and a public switched telephone network (PSTN). Each wireless communication network RN11, RN12, RN13 is connected to one or more mobile service switching centers (MSCs) which form an interface to the public switched telephone network (PSTN) to which the operators P1 and P2 and the service node F are also connected. It includes a base station.

Some mobile telephone users are located in the radio communication network RN11, and the authorized users A1 between them are called owners, and the base station B1 is connected to the switching center MSC. Owner A1 owns mobile phone M (FIG. 2), which serves as an inaccessible stored terminal identity, the so-called mobile identity m that was registered by owner A1 at service node F. FIG. The mobile identity m identifies the mobile phone M and may be, for example, the serial number of the phone. The service node F may be a guarantee company used by one of the operators P1 and P2.

Some mobile phone users are in wireless communication network RN12, and unauthorized users between them are A2, and base station BS2 is connected to mobile service switching center MSC.

FIG. 1A shows the mobile phone M and its mobile identity m at two different locations, namely the location PosA of the owner A1 and the location PosB of the unauthorized user A2.

The two operators P1 and P2 are connected to the mobile service switching center MSC and supply subscriptions using the wireless communication networks RN11, RN12, RN13. As described in more detail below, operator P1 stores information about its subscriber-user in database D1, and operator P2 stores information about its user-subscriber in database D2.

The database D1, D2, as mentioned above, includes a storage field 10 in which information about each user A1, A2 of each user card, which is a SIM-card SIM1, SIM2, SIM3, is stored. When purchasing the SIM cards SIM1, SIM2, SIM3 from the operator P1 or from the operator P2, the SIM card (SIM1, SIM2, SIM3) is the user of each SIM card (SIM1, SIM2, SIM3). It is set to the associated SIM-identities s1, s2, s3 that are coupled to the corresponding information about A1, A2.

The identification codes P1-id and P2-id included in the SIM-identities s1, s2 and s3 identify the operators P1 and P2 to which the SIM-identities s1, s2 and s3 are registered.

1B illustrates a possible structure of the storage field 10 in the databases D1 and D2. The storage field 10 includes five storage units 1, 2, 3, 4 and 5 in which data is stored. The names of each user A1, A2 are stored in the first storage unit 1, the telephone numbers of each user A1, A2 are stored in the second storage unit 2, and each user A1, A2. Is stored in the third storage unit 3, the personal identity number of each user A1, A2 is stored in the fourth storage unit 4, and the above is combined with each user information A1, A2. SIM-identities s1, s2 and s3 are stored in the fifth storage unit 5. The storage field 10 includes more than the five storage units 1, 2, 3, 4, 5 mentioned above when wishing to store more user information. When a particular portion of the user information does not need to be stored in the storage field 10, the corresponding storage unit can be excluded. The order in which user information is stored in the storage units 1, 2, 3, 4, 5 may be different from that described, and the illustrated structure of the storage field 10 is only set by example.

2 is a block schematic diagram illustrating a mobile phone M, a first SIM-card SIM1 and a permanent service node F. FIG. The mobile phone M includes an interlinking unit 301, a card space u, a reading unit 303, a first comparator unit 305, a receiver 306, a transmitter 307, a keypad 309. , An indicator 310, an inquiry unit 313, a second comparator unit 315, a memory unit 317, and a control unit 319, which are illustrated in the figure. Receiver 306 and transmitter 307 are connected to antenna 311. The units are interconnected by a data bus 312.

The first SIM card SIM1 in particular comprises a processor 331 which is the device shown in the figure. The SIM-identity S1, which is also shown in the figure and assigned to the first SIM-card SIM1, is stored in the processor 331.

The service node F comprises in particular the receiver 321, the transmitter 322, the localizing unit 323, the computer unit D _F , the control means 329 and the registration unit 330. Receiver 321 and transmitter 322 are coupled to antenna 327. The unit is interlinked by data bus 328.

The memory unit 317 of the mobile telephone M is used for storing the above-mentioned mobile identity m and the selected security code PIN1 inaccessible. When the user removes the user's first SIM-card SIM1 from the mobile phone M and replaces the user's first SIM-card SIM1 with the mobile phone M, the code is assigned by the owner A1. Used. The memory unit 317 is also used, for example, to temporarily store the SIM-identity s2. When the first SIM-card SIM1 is located in the intended card space u of the mobile phone M, the reading unit 303 reads the SIM-identity s1 belonging to the first SIM-card SIM1. Read and register.

The query unit 313 is used to request the owner to enter the user's security code PIN1 in response to the request displayed on the indicator 310. Owner A1 enters security code PIN1 'on keypad 309.

The first comparator unit 305 is used to compare the input safety code PIN 'with the selectively stored safety code PIN1.

The interlinking unit 301 joins together as previously described and establishes a relationship between the SIM-identity s1 and the mobile identity m stored in the memory unit 317.

The second comparator unit 315 of the mobile telephone M compares the registered SIM-identity s1 with the mobile identity m to confirm whether the relationship established in the interlinking unit 301 has been completed.

The units u, 301, 303, 305, 306, 307, 309, 313, 315, 317 and 319 of the mobile telephone M are connected to the data bus 312 through which the units communicate with each other. The control unit 319 of the mobile telephone M controls the various units u, 301, 303, 305, 306, 307, 309, 313, 315, 317 through the medium of the data bus 312 and in the method thereof. Thus causing the unit to perform the desired operation.

The localizing unit 323 of the service mode F particularly includes an identification unit 325 identifying an operator P2 associated with the SIM-identity s2 received in the service mode F, the identification unit 325 Identifies user A2 of mobile phone M. < RTI ID = 0.0 > Element 325 is shown in the figure.

The computer unit (D _F ) of the service node (F) serves to register incoming messages such as SIM-identity (s2) and mobile identity (m), which messages are displayed on the screen (D _S ) of the computer (D _F ). Is shown on the figure.

The registration unit 330 is used for storing the above-mentioned mobile identity m and its corresponding owner A1.

The control means 329 of the service node F controls the various units 321, 322, 323, D _F , 325, 330 via the data bus 328, and the units 321, 322, 323, D _F , 325, 330 are connected to the data bus 328.

An exemplary embodiment is described with reference to FIGS. 1A and 2, where the owner A1 wishes to identify an unauthorized user A2 of the mobile phone M that has been lost and stolen.

When using mobile phone M for the first time, user A1 selects security code PIN1 and enters the code into mobile phone M. The mobile phone M registers the selected security code PIN1 and the code is stored inaccessible to the mobile phone M.

Later, the owner A1 wishes to subscribe to the operator P1 and therefore applies for a first SIM-card SIM1 which entitles the user to the subscription service provided by the operator P1. The application includes personal information A1-info and mobile identity m such as the owner A1's name, phone number, address, personal identification number, and the like. The operator P1 stores the owner information A1-info in the storage field 10 of the database D1 according to the above, and associates the information with the SIM-identity s1. The first SIM card SIM1 is assigned to the above-mentioned SIM-identity s1 and the first SIM card SIM1 is transferred to the owner A1. SIM-identity s1 includes identification code P1-id of operator P1.

The owner A1 can place the first SIM card SIM1 in the card space u of the mobile phone M. FIG. The mobile phone M detects that the first SIM card SIM1 is located in the card space u, so that the mobile phone M reads the SIM-identity s1 of the first SIM card SIM1. do. The mobile phone M, for example, requests the owner to enter the security code PIN1 in response to the request shown on the indicator 310. The owner A1 enters into the mobile phone M a security code from which he selects himself.

The mobile phone M reads the entered security code PIN 'and compares the code with the selected stored security code PIN1. When the code matches, the mobile phone M combines the SIM-identity s1 with the mobile identity m and registers a relationship made between the SIM-identity s1 and the mobile identity m. How it is done is described below with reference to FIG. 2.

The owner A1 can use the mobile phone M and establish communication on a subscription coupled to the operator P1.

Assume that unauthorized user A2 has mobile phone M in his possession. Owner A1 informs operator P1 that mobile phone M has been lost. The operator P1 blocks the SIM identity s1 of the first SIM card SIM1 in the mobile phone M, thereby causing the user A2 to turn the mobile phone M into the first SIM-card ( It is not possible to use it as SIM1).

It is assumed that an unauthorized user A2 wishes to join the operator P2 and by applying the second SIM card SIM2 to the operator P2, the user A2 is entitled to the service provided to the operator P2. do. In the same manner as listed above, user A2 submits an application that includes mobile identity m and personal information A2-info. The operator P2 stores A2-info related to the user A2 in the database D2 and associates the information with the SIM-identity s2. SIM-identity s2 is coupled to second SIM-card SIM2 and second SIM-card SIM2 is transferred to user A2. SIM-identity s2 includes an operator identification code P2-id.

The user A2 places the second SIM card SIM2 in the card space u of the mobile phone M, so that the mobile phone M has a second SIM card SIM2 in the card space u. Sense that you are in the right place. The mobile phone M reads the SIM-identity s2 of the second SIM-card SIM2 and requests the owner to enter it into the above mentioned security code PIN1 via the indicator. The user A2 enters the code PIN2 'into the mobile telephone M. FIG.

The mobile phone M reads the input code PIN2 'and compares the code with the selected stored safety code PIN1. Since the codes do not match, the mobile phone M compares the SIM-identity s2 with the mobile identity M. FIG. The comparison shows that the above mentioned relationship between the SIM-identity s2 and the mobile identity m is invalid. The mobile phone M stores the SIM-identity s2 in the memory and automatically transmits the SIM-identity s2 and the mobile identity m.

In GSM systems, so-called Short Message Service (SMS) -services are used to transmit SIM-identity s2 and mobile identity m on a single dedicated control channel (SDCCH). The SIM-identity s2 and the mobile identity m are transmitted to the computer D _F included in the service node F on the control channel SDC via the base station BS2 and the mobile service switching center MSC. . SMS-services are used in GSM systems to send short messages to mobile phones and to send short messages from mobile phones, which can include up to 160 alphanumeric characters.

The mobile phone M periodically repeats the transfer of the stored SIM-identity s2 and the mobile identity m at regular time intervals, and each time interval until the mobile phone M receives the response signal RES. Has a duration of T-seconds. The message is for example in the case of a mobile phone M which is temporarily located in an area screened in the radio direction from the base station BS2, where the base station BS2 eventually receives the SIM-identity s2 and the mobile identity m. It is repeatedly transmitted from the mobile phone M to confirm that.

At the service node F, the computer D _F receives and registers the SIM-identity s2 and the mobile identity m sent by the mobile phone M and is the same on the screen D _S of the computer D _F. Indicates. The computer D _F then receives a response signal RES confirming reception and registration of the SIM-identity s2 and the mobile identity m via the switching center MSC and the base station BS2 via the mobile telephone M. Automatically send to As in the case described above, the SMS-service is used to transmit the SIM-identity s2 and the mobile identity m on the control channel SDCCH.

It can also be determined by transmitting a manual response signal (RES) from the computer (D _F) SIM- identity (s2) and a mobile identity (m) and reception method (D _F) in the same computer as the one registered in the permanent .

The mobile phone M stops the periodic transmission of the SIM-identity s2 and the mobile identity m upon reception of the response signal RES and deletes the SIM-identity s2 from its memory.

When the service node F is received by the computer D _F and causes the SIM-identity s2 and the mobile identity m indicated on the screen D _S to be recognized, the service node F is called SIM-. The operator P2 is read out from the identity s2 to thereby identify the operator P2 which causes the SIM-identity s2 to be registered. The service node F obtains from the operator database D2 personal information A2-info about the user A2 in contact with the operator P2 and coupled to the SIM-identity s2.

The service node F contacts the owner A1 coupled to the registered mobile identity m and checks whether an error occurs or whether the owner A1 has lost his mobile phone M. Since it is assumed that the owner A1 has lost his mobile phone M in the illustrated case, the service node F uses the personal information A2-info obtained from the operator P2 to make the mobile phone M available. To track user A2.

Variants of the above described example are now described.

As in the previous example, the owner A1 withdraws the subscription with the operator P1 and with the first SIM-card SIM1 coupled to the SIM-identity s1 containing the operator identification code P1-id. Assume that it is published. The owner A1 locates the first SIM card SIM1 in the mobile phone M and enters the security code PIN1 'in response to the request made by the mobile phone M according to the foregoing. The mobile phone M combines the SIM-identity s1 with the mobile identity m and registers the relationship made between the SIM-identity s1 and the mobile identity m.

The owner A1 establishes communication on a subscription that is currently available for his mobile phone M and is coupled to the operator P1.

Suppose owner A1 wishes to pull out a new subscription with operator P2. Hence, the owner A1 applies for a third SIM-card SIM3 which entitles him to use the new subscription with the operator P2. The application includes a mobile identity m about the owner A1 and personal information A1-info. The personal information A1-info is stored in the database D2 by the operator P2 in the same manner as is listed, and the personal information A1-info is related to the SIM-identity s3. The third SIM-card SIM3 is assigned to the SIM-identity s3 and the third SIM-card SIM3 is disclosed to the owner A1. SIM-identity s3 includes an operator identification code P2-id.

The owner A1 places the third SIM card SIM3 in the card space u of the mobile phone M and inputs the security code PIN1 'in response to a request from the mobile phone M. The mobile phone M is informed that the third SIM-card SIM3 is in the place of the card space u and reads the SIM-identity s3 and the entered security code PIN 'of the SIM-card SIM3. Detect.

The mobile phone M compares the entered security code PIN1 'with the previously mentioned selected security code PIN1 stored in that phone. The comparison is that the codes match each other and the mobile phone M combines the SIM-identity s3 with the mobile identity m and registers the relationship made between the SIM-identity s3 and the mobile identity m. Discover what you do.

The owner A1 can use the mobile phone M to establish communication as a subscription coupled to the operator P2.

In this example, it is assumed that the owner A1 places the third SIM-card SIM3 in the card space u and enters the wrong security code PIN4 in the mobile phone M. The mobile phone M reads the security code PIN4 of the error and compares it with the aforementioned security code PIN1 selected by the owner A1. The comparison shows that the code does not match and the mobile phone M continues by comparing the SIM-identity s3 assigned to the third SIM-card SIM3 with the mobile identity m. Since the SIM-identity s3 and the mobile identity m are not joined together by the mobile phone M, the comparison is that the above-mentioned relationship between the SIM-identity s1 and the mobile identity m is the SIM-identity. (s3) and invalid for the moving identity m. The mobile phone M stores the SIM-identity s3 in its memory and automatically transfers the SIM-identity s3 and the mobile identity m.

The mobile phone M transfers the SIM-identity s3 and the mobile identity m on the control channel SDCCH using the permanent SMS service. The SIM-identity s3 and the mobile identity m are transmitted on the control channel SDCCH to the computer D _F of the service node F via the base station BS1 and the switching center MSC.

As the mobile telephone M has always standing, it continues to transmit the stored SIM-identity s3 and the mobile identity m at regular intervals until the response signal RES is received.

At the service node F, the computer D _F receives and registers the SIM-identity s3 and the mobile identity m transmitted by the mobile telephone M, and shows the same on the computer screen D _S. The computer D _F automatically transmits the response signal RES to the mobile telephone M via the switching center MSC and the base station BS1 in the reception recognition of the identity. As in the previous case, the SMS-service is used to transmit the SIM-identity s3 and the mobile identity m on the control channel SDCCH.

The mobile phone M stops transmitting the SIM-identity s3 and the mobile identity m upon receiving the response signal RES and deletes the stored SIM-identity s3 from its memory.

When the service node F notifies on the computer screen D _S that the computer has received the SIM-identity s3 and the mobile identity m, the service node F is the owner of the registered mobile identity m. Check in (A1). The service node F does not take any further action when an error occurs.

Another alternative of the above example is that the owner A1 applies for the first SIM-card SIM1 to the operator P1 with the intention of obtaining a subscription, as permanently mentioned. As in the previous case, operator P1 stores personal information A1-info about SIM-identity s1 in database D1 and includes SIM-identity s1 that includes an operator identification code P1-id. Is assigned to the first SIM-card SIM1.

The owner A1 places the first SIM-card SIM1 in the intended card space u and enters the security code PIN1 'in response to a request from the mobile phone M. The mobile phone M detects that the first SIM card SIM1 is in the place of the card space u and reads the SIM identity of the first SIM card SIM1 and the entered security code PIN1 '. do.

The mobile phone M compares the entered security code PIN1 'with the above-mentioned and optionally stored security code PIN1. The comparison shows that the code is the same and the mobile phone M combines the SIM-identity s1 with the mobile identity m and registers the relationship made between the SIM-identity s1 and the mobile identity m. .

Owner A1 may use mobile phone M to communicate on a subscription coupled to operator P1.

It is assumed that the owner A1 removes the first SIM-card SIM-1 and then places the first SIM-card SIM1 in the intended card space u of the mobile phone M. The mobile phone M senses the presence of the first SIM-card SIM1 and requests to read the SIM-identity of the first SIM-card SIM1 and input the selectively stored security code PIN1.

It is assumed that the owner A1 enters the safety code PIN3 of the error. The mobile phone M reads the input security code PIN3 and compares the code with the selected stored security code PIN1. The comparison shows that the entered security code PIN3 is an error. The mobile telephone M makes a comparison between the SIM-identity s1 and the mobile identity m. The comparison shows that the above-mentioned relationship between the SIM-identity s1 and the mobile identity m is valid and no other procedure is performed in the mobile phone M.

The owner A1 can thereby use the mobile phone M and communicate on a subscription coupled to the first SIM card SIM1.

Even when the owner A1 does not enter the security code PIN1 as requested by the mobile phone in the previous example, the mobile phone M compares the SIM-identity s1 with the mobile identity m. do. The comparison shows that the above-mentioned relationship between the SIM-identity s1 and the mobile identity m is valid so that no other procedure is performed at the mobile phone M.

3A and 3B are flow charts illustrating the method of the present invention as described in the previous example. The mobile identity m and the security code PIN1 selected by the telephone owner A1 are stored in the mobile telephone M. Owner A1 registers mobile identity m as service node F, see above.

The method begins with the owner A1 placing the first SIM-card SIM1 in the card space u intended for the mobile phone M (step 101). The first SIM-card SIM1 qualifies the user for the subscription service provided by the operator P1, and the SIM-identity s1 assigned to the first SIM-card SIM1 is associated with the owner A1. It is coupled to personal information A1-info, which information is stored in the database D1 of the operator P1, as mentioned above. SIM-identity s1 includes an operator identification code P1-id.

The mobile phone M detects the presence of the first SIM-card SIM1 in the card space u and reads the SIM-identity s1 belonging to the first SIM-card SIM1 in step 103, Ask for the security code PIN1.

The owner A1 enters the security code PIN1 'in step 105, and the mobile phone M reads the code PIN1'. The mobile phone M compares the safety code PIN1 'input in step 107 with the selected stored safety code PIN1. The comparison shows that the code is the same according to alternative Y. In step 109, the mobile telephone M couples the read SIM-identity s1 to the mobile identity m and registers a relationship between the SIM-identity s1 and the mobile identity m.

The unauthorized user A2 has a mobile phone M and replaces the first SIM-card SIM1 with a second SIM-card SIM2 that qualifies the user for the subscription service provided by the operator P2. , The SIM-identity s2 assigned to the second SIM-card SIM2 is coupled to the personal information A2-info about the user A2 and the information is stored in the database D2 of the operator P2. do. SIM-identity s2 includes an operator identification code P2-id.

In step 101, user A2 places the second SIM card SIM2 in the intended card space u of the mobile phone M.

The mobile phone M detects the presence of the second SIM-card SIM2 in the card space u according to the above contents, reads the SIM-identity s2 in step 103 and by the owner A1. Request the selected security code (PIN1).

In step 105, user A2 enters security code PIN2 'and mobile phone M reads the entered security code PIN2'. The mobile phone M compares the security code PIN 'entered in step 107 with the selected stored security code PIN1, and the information shows an inconsistency according to alternative N.

In step 111, the mobile phone compares the read SIM-identity s2 with the mobile identity m, the comparison showing that according to alternative N the identity does not fulfill the above mentioned coupling relationship. . In step 112, the mobile phone M stores the read SIM-identity s2 in memory and transmits the read SIM-identity s2 and the mobile identity m in step 113. The mobile phone M uses the above-mentioned SMS-service in the transmission and establishes the SIM-identity s2 and the mobile identity m on the control channel SDCCH via the base station BS2 and the switching center MSC. To the computer D _F of the service node F.

According to the method step 117 in FIG. 3B, a confirmation is operated at the mobile phone M to confirm whether the response signal RES has been received from the service node F. FIG. It is C1 in FIGS. 3A and 3B. If such a response signal has not been received in accordance with alternative N, then mobile phone M continues to repeatedly transmit the stored SIM-identity s2 and mobile identity m at regular time intervals in step 113. ), Where each time interval has a duration of T-seconds. It is C2 in FIGS. 3A and 3B.

In step 115, the computer D _F of the service node F receives and registers the SIM-identity s2 and the mobile identity m transmitted by the mobile telephone m and replaces the identity with the computer screen ( D _S ). The computer D _F transmits the response signal RES to the mobile telephone M via the switching center MSC and the base station BS2 in step 116 by sending the SIM-identity s2 and the mobile identity m. To confirm receipt and registration. As in the previous case, the SMS-service is used to transport the SIM-identity s2 and the mobile identity m on the control channel SDCCH.

The mobile phone M receives the response signal RES according to the alternative Y in step 117 and thus interrupts its periodic transmission of the SIM-identity s2 and the mobile identity m, thereby. (M) deletes the SIM-identity s2 stored in step 119 from its memory.

The service node F contacts the operator P2 identified by the identification code P2-id in step 121 according to the foregoing. The service node F is supplied by the operator P2 as user personal information A2-info from the operator database D2, and the information A2-info is supplied to the SIM-identity received at the service node F. is bound to (s2). The personal information A2-info can be used by the service node F in step 121 to identify the user A2 of the mobile phone M having the mobile identity m.

In step 123, the service node F is in contact with the owner A1 coupled to its registered mobile identity m and for example if a mistake has occurred or the mobile phone M of the owner A1 has been stolen. Check.

Since the mobile phone M of the owner A1 has been stolen in the above example, it is necessary for the service node to obtain the required step according to the alternative Y in step 125. The measurement is performed in step 127 and tracks user A2 of mobile phone M, including service node F using the personal information A2-info received from operator P2.

In this case, in the previous example, the owner A2 of the mobile phone M is located in the mobile phone M with a third SIM-card SIM3 which is no longer coupled to the mobile identity m in step 101. Assuming, and when the owner A1 enters the wrong security code PIN3 or fails to enter the security code PIN1 'in the mobile phone M at the same time in step 107, step 123. The verification performed by the service node F with respect to the owner A1 at is done at the service node F, which does no further action according to the alternative N in step 125.

Alternative embodiments of the present invention are described with reference to FIGS. 3A and 3B and previous examples.

As mentioned above, the owner A1 applies for subscription to the operator P1 and thereby receives a first SIM-card SIM1 having an assigned SIM-identity s1 that includes an identification code P1-id. . In step 101, the owner A1 places the SIM card SIM1 in the intended card space u of the mobile phone M. According to the existing method, it combines the SIM-identity s1 with the mobile identity m in step 109 and registers the relationship between the SIM-identity s1 and the mobile identity m to register the relationship. Is done in

The owner A1 removes the first SIM card SIM1 from the mobile phone M in accordance with step 101 and then moves the first SIM card SIM1 back from the mobile phone M to the card space u. Assume it is located. The mobile phone M thereby detects the presence of the first SIM-card SIM1 in the card space u, reads the SIM-identity s1 of the SIM-card SIM1 in step 103 and is the owner. A request is made on the display to ask (A1) to enter the above-mentioned selective stored security code PIN1.

In step 105, it is assumed that the owner A1 enters the wrong security code PIN3. The mobile phone M reads the input security code PIN3 and compares the code with the selected stored security code PIN1. The comparison shows that security code PIN3 does not match safety code PIN1 (step 107). The mobile phone M continuously compares the read SIM-identity s1 with the mobile identity m (step 111), where the comparison is carried out by the SIM-identity s1 and the mobile identity m. In this example we show that the relationship is completed, whereby alternative Y is applied and no other measurements are performed on the mobile phone M.

The above-mentioned signaling on the control channel (SDCCH) is described with reference to the signaling scheme set up in FIG. The vertical lines indicate the events occurring in the time sequence of the mobile telephone M, the base station BS2, and the mobile service switching center MSC, where the time is based on t in the figure.

As described above, the owner A1 has as his own mobile phone M whose mobile identity m is registered in the service node F. The owner A1 has a subscription provided by the operator P1. Application for use, whereby the owner A1 receives from the operator P1 a first SIM-card SIM1 having its assigned SIM-identity s1 as fully described above. SIM-identity s1 includes an operator identification code P1-id.

The owner A1 places the first SIM-card SIM1 in the card space u of the mobile phone M and then enters the security code PIN1 in response to a request made by the mobile phone M, The mobile phone M thus combines the SIM-identity s1 of the first SIM-card SIM1 with the mobile identity m.

Owner A1 can use mobile phone M to communicate on a subscription coupled to operator A1.

The unauthorized user A2 owns the mobile phone M and the owner A1 reports the loss to the operator P1 and the operator at the mobile phone M has the SIM identity of the first SIM card SIM1. Suppose we block (s1) properly. The unauthorized user A2 cannot use the mobile phone M as the first SIM card SIM1.

The user A2 wishes to subscribe to the service provided by the operator P2 and submits to the operator P2 an application for the second SIM-card SIM2 which entitles the user to use the service provided by the operator P2. Is assumed. In the same way as mentioned above, user A2 includes in his application a mobile identity m along with user personal information A2-info. The operator P2 stores the user personal information A2-info in the database D2 and associates the information with the SIM-identity s2. SIM-identity s2 is coupled to second SIM-card SIM2 and second SIM-card SIM2 is transferred to user A2. SIM-identity s2 includes an operator identification code P2-id.

The user A2 assumes that he moves to a place that is shielded in the wireless direction from the base station BS2, and the user A2 places the second SIM-card SIM2 in the telephone card space u. The mobile phone M senses the presence of the second SIM-card SIM2 in the card space u and reads the SIM-identity s2 of the second SIM-card SIM2. The mobile phone M displays a message requesting the above-mentioned security code PIN1 to be input. User A2 enters code PIN2 'at mobile phone M.

The mobile phone M reads the input code PIN2 'as in the case of the permanent case and compares the code with the selected stored code PIN1. Since the code is not matched, the mobile phone M compares the SIM-identity s2 with the mobile identity m. The comparison shows that the above mentioned relationship between SIM-identity s2 and mobile identity m is not fulfilled. Thus, the mobile phone M stores the SIM-identity s2 in its memory and the SIM-identity s2 and the mobile identity m on the control channel SDCCH, as illustrated at point 401 in FIG. Send automatically.

The mobile telephone M continues to transmit the above-mentioned identities s2 and m at regular time intervals of the T-second duration as shown in the figure, and at the service node F the response signal from the computer D _F ( Wait for RES).

Assume that the user A2 is moved from the screened place in the wireless direction, whereby the SIM-identity s2 and the mobile identity m that have been repeatedly transmitted by the mobile phone M are the base station BS2 at point 403. Eventually reach). The mobile phone M transmits the SIM-identity s2 and the mobile identity m on the control channel SDCCH to the point 405 in the figure using the permanent SMS service, where the service node F is located. The computer D _F ) receives and registers the SIM-identity s2 and the mobile identity m.

The SIM-identity s2 and the mobile identity m received and registered by the computer D _{F are} shown on the screen D _S. The computer D _F transmits the response signal RES to the mobile telephone M on the control channel SDCCH at point 407 of the figure via the switching center MSC and the base station BS2 in a permanent manner. Send.

The mobile phone M receives the response signal RES at point 409, whereby the mobile phone stops transmitting the SIM-identity s2 and the mobile identity m and removes the stored SIM-identity s2. Delete from memory.

The service node _F receives the SIM-identity s2 as the computer D _F receives the SIM-identity s2 and the mobile identity m and thereby identifies the identity of the operator P2 that registers the SIM-identity s2. It reads from the operator identification code (P2-id) included in the). The service node F receives from the operator P2 personal information A2-info obtained from the database D2 in contact with the operator P2 and coupled to the SIM-identity s2 and the user A2.

The service node F confirms with the owner A1 coupled to the registered mobile identity m. Since the owner A1 has lost his mobile phone M, the service node F uses the personal information A2-info received from the operator P2 to the user A2 of the mobile phone M. To track.

As an alternative to mobile phone M, which transmits the SIM-identity s2 and mobile identity m at regular time intervals until a response signal RES is received, the mobile phone M is provided by user A2. Each time the user A2 sets up the call connection on the second SIM card SIM2 via the mobile phone M without recognizing the transmission, it controls the SIM-identity s2 and the mobile identity m. It may be configured to transmit on the channel (SDCCH). The procedure continues until the mobile phone M receives the response signal RES at point 409 according to the foregoing. Other possibilities are also feasible.

In mobile telephone systems except GSM systems, services similar to SMS-services can be used and channels other than SDCCH channels can be used to transfer the messages and signals between the mobile telephone M and the service node F. Similarly, channels other than SDCCH channels of GSM systems may be used.

The above-mentioned SIM-identities (s1, s2 and s3) correspond by IMSI identity (International Mobile Subscription Identity) in GSM system, and mobile identity (m) correspond by IMEI identity (International Mobile Equipment Identity) in GSM system. do. Mobile phone systems except GSM systems use a user card as a user identity associated with a SIM card.

It will be appreciated that the present invention is not applicable when the user A1 initially uses the mobile phone M and does not select the security code PIN1 in the example above.

Claims (18)

In the method for identifying the users A1 and A2 of the mobile communication unit M in the mobile communication system, the unit has a terminal identity m and a security code PIN1 that has been selected by the authorized user A1, The unit M comprises a card space u having user identities s1, s2, s3 and receiving user cards SIM1, SIM2, SIM3 coupled to operator subscriptions P1, P2, and authorized 1. A method of identifying one of users A1 and A2 of a mobile communication unit M to which one of the user identities s1 and s3 corresponding to the user cards SIM1 and SIM3 is linked to a terminal identity m. Placing the user cards SIM1, SIM2, SIM3 in the card space u of the mobile communication unit M; Registering user identities (s1, s2, s3) of the inserted user cards (SIM1, SIM2, SIM3) with the mobile communication unit (M); Responding to a request made by a mobile communication unit (M) for inputting said security code (PIN1 '); Comparing the requested security codes PIN1 'and PIN2' with the selected security code PIN1 in the mobile communication unit M; When the requested security code (PIN1 ', PIN2') does not match the selected security code (PIN1), comparison is made in the mobile communication unit (M) between the registered user identity (s1, s2, s3) and the terminal identity (m). Performing a step; Storing the registered user identities (s2, s3) in the mobile communication unit (M) when the registered user identities (s2, s3) and the terminal identity (m) do not match with each other; Transmitting the stored user identities s2 and s3 and the terminal identity m from the mobile communication unit M; Receiving the registered and stored user identities (s2, s3) and terminal identities (m) at the service node (F). The method of claim 1, further comprising the steps of: repeating transmissions from the mobile communication unit (M) of said stored user identity (s2, s3) and said terminal identity (m); Transmitting a response signal RES from the service node F; Receiving a response signal RES at the mobile communication unit M; Stopping transmission of the stored user identity (s2, s3) and terminal identity (m) from the communication unit (M). A user (A1) according to claim 1 or 2, having a terminal identity (m), is registered with the service node (F), Identifying at the service node F a registered authorized owner A1 of the terminal identity m; Localizing the user A2 of the mobile communication unit M at the service node (F). 4. The method according to claim 1, 2 or 3, wherein linking the terminal identity m of the mobile communication unit M with the user identities s1 and s2 of the authorized user cards SIM1 and SIM3 is said terminal identity m. And generating a first result by performing an operation set between the user identities s1 and s3. The comparison performed in the mobile communication unit M between the registered user identity s1, s2, s3 and the terminal identity m, Performing the set operation on its registered user identity (s1, s2, s3) and terminal identity (m) and thereby obtaining a second result; And comparing the first result with the second result. 5. The user according to claim 4, wherein the registered user identities (s1, s2, s3) and the terminal identity (m) match each other when the first result is equal to the second result. How to. The comparison according to any one of the preceding claims, wherein the comparison made in the mobile communication unit (M) between the requested security codes (PIN1 ', PIN2') and the selected security code (PIN1) is: Recording the requested security codes PIN1 'and PIN2' into the mobile communication unit M; Determining in said unit (M) whether the requested security codes (PIN1 ', PIN2') are equal to the selected security code (PIN1). The user of a mobile communication unit according to claim 2, wherein the registered user identities (s2, s3) and the terminal identity (m) are repeatedly transmitted from the mobile communication unit (M) at regular time intervals (T). How to identify. 4. The operator P1, P2 owns the data storage devices D1, D2 and stores the user information A1-info, A2-info about several users A1, A2. A mobile communication unit which stores in the devices D1, D2 and combines the user information A1-info, A2-info with the user identities s1, s2, s3 of each user A1, A2. How to identify your users. 9. The method according to claim 8, wherein the user information (A1-info, A2-info) for each user (A1, A2) is included in the name, address, telephone number and personal identification number of each user (A1, A2). Characterized in that the user of the mobile communication unit. 10. The mobile communication unit (M) is owned by the user (A2), and its registered user identity (s2) identifies the operator (P2) of the subscription which causes each user card (SIM2) to be combined. Includes a specific identifying identity (P2-id), Localization of the user A2 of the mobile communication unit M in the service node F, Identifying the operator P2 at the service node F by reading the identification identity P2-id from the registered user identity s2; Reading user information A2-info coupled to a user identity s2 registered in the data storage device D2 of the operator P2; Transferring the user information A2-info from an operator P2 to a service node F; Identifying a user A2 at the service node (F). Method according to any of the preceding claims, characterized in that the service node (F) is an operator (P1, P2) coupled to the guarantee company or authorized user cards (SIM1, SIM3). . In the device of the mobile communication system for identifying the users A1 and A2 of the mobile communication unit M with the terminal identity m and the security code PIN1 selected by the authorized user A1, the device is a user identity ( a card space u having s1, s2, s3 and intended to receive user cards SIM1, SIM2, SIM3 coupled to subscriptions of operators P1, P2, and authorized user cards SIM1, SIM3 One of the user identities (s1, s3) corresponding to) is linked to the terminal identity (m), Means (317) for storing said terminal identity (m) and said selected security code (PIN1) in said mobile communication unit (M); Means (303) for registering user identities (s1, s2, s3) of user cards (SIM1, SIM2, SIM3) located in the card space in the mobile communication unit (M); Means (313) for requesting insertion of a security code (PIN1 ') in said mobile communication unit (M); Means (310) for indicating a request to insert a security code (PIN1 ') in said mobile communication unit (M); Means (315) for comparing the requested security codes (PIN1 ', PIN2') with the selected security code (PIN1) in the mobile communication unit (M); Means (305) for comparing the registered user identities (s1, s2, s3) with a terminal identity (m) in the mobile communication unit (M); Means (317) for storing the registered user identities (s2, s3) in the mobile communication unit (M); Means (307) for transferring the stored user identity (s2, s3) and terminal identity (m) from the mobile communication unit in the mobile communication unit (M); Means (330) for registering a user who has qualified for the terminal identity (m) at the service node (F); Means (321) for receiving the transfer registered user identity (s2, s3) and terminal identity (m) at the service node (F). 13. The apparatus of claim 12, further comprising: means (D _F ) for storing a registered user identity (s2, s3) and a terminal identity (m) at a service node (F); Means (322) for transmitting a response signal (RES) at the service node (F); Response signal receiving means 306 of the mobile communication unit M; And means (323) for localizing the user (A2) of the mobile communication unit (M) at the service node (F). The device D _F , which stores the registered user identity s2 and the terminal identity m in the service node _F , displays the registered user identity s2 and the terminal identity m. means (D _S) device for identifying a user of the mobile communication unit comprises a. The user information A1-info according to claim 13 or 14, wherein the operators P1 and P2 have data storage devices D1 and D2, and the data storage devices D1 and D2 are related to other users A1 and A2. , A2-info), wherein the user information (A1-info, A2-info) is coupled to the user identities (A1, A2) of each user (s1, s2, s3). Device that identifies the user of the unit. Mobile communication according to claim 15, characterized in that the service node (F) comprises means (321) for receiving from the operator (P2) user information (A2-info) coupled to the registered user identity (s2). Device that identifies the user of the unit. The means 323 according to claim 16, wherein the user A2 has the mobile communication unit M as his own, and the means 323 for localizing the mobile communication unit M at the service node F, Operator identification means 325; Means (325) for identifying the user (A2) from the user information (A2-info) received from the operator (P2). The method according to claim 12, 13, 14, 15, 16, or 17, wherein the user identities (s1, s2, s3) are mapped by SIM codes and the user cards (SIM1, SIM2, SIM3) are mapped to SIM cards in the GSM system. Apparatus for identifying a user of the mobile communication unit, characterized in that corresponding.