KR20040069841A - A method of certifying smart card for Subscriber Identification Module using Network - Google Patents

Abstract

PURPOSE: An authentication method of a smart card for subscriber checking module using a network is provided to easily and stably perform an authentication procedure by receiving a PUK(Personal Unlocking Key) through a network. CONSTITUTION: A controller checks whether a mobile terminal is in a PIN(Personal Identification Number) activation-state(171). If the mobile terminal is in the activation-state, a PIN is inputted(173). The controller determines whether the inputted PIN and a PIN stored in a SIM(smart card for Subscriber Identification Module) card unit are identical(175). If they are not identical, the controller checks the number of times of inputting of the PIN(177). If the number of times of inputting is 3, the controller connects the mobile terminal and a network providing a corresponding mobile communication service(181). A resident registration number or an SSN(Social Security Number) is inputted(183). The controller checks the number of times of inputting of the resident registration number or of the SSN(185). If the number of times of inputting is 5, the controller converts the current mode of the mobile terminal to an emergency mode(187).

Description

A method of certifying smart card for Subscriber Identification Module using Network}

The present invention relates to a method of authenticating a smart card for a subscriber identity module inserted in a mobile communication terminal, and more particularly, to a smart card for subscriber identity module (SIM card) card using a network. It relates to an authentication method.

In general, a SIM card is inserted into a GSM (Global System for Mobile Communication) mobile communication terminal, which is a time division multiple access method in Europe.

The SIM card is detachable from the mobile communication terminal, is composed of a microprocessor and a memory chip, and stores various kinds of information of the user.

In addition to the SIM card, the smart card for the subscriber identification module includes a Universal Subscriber Identification Module (hereinafter referred to as a "USIM") card, and the USIM card is a mobile phone or computer user anywhere in the world. Smart card for application to Universal Mobile Telecommunications System (UMTS), a third generation communication service capable of transmitting broadband packet-based text, digitized voice or video, and multimedia data at a high speed of 2Mbps or more. Built in, it can hold user data along with secret authentication data. Hereinafter, the USIM card will be referred to collectively as a SIM card.

The user information stored in the SIM card includes a personal identification number (PIN) for mobile terminal user authentication and a personal unblocking key (PUK). Personal authentication information).

The personal authentication information stored in the memory chip of the SIM card determines whether the card user is a registered user in the network when the SIM card is inserted into the mobile communication terminal so that the user can use the mobile communication terminal. Call charges to the SIM card user.

It is determined whether the SIM card user is a registered user on the network. If an incorrect PIN is input three or more times, the use of the mobile communication terminal is blocked and a PUK must be input to release it. If you enter the wrong PUK more than 10 times, you will not be able to make a call except for an emergency call. The PUK is provided at the time of purchase of the SIM card and is a unique password stored in the SIM card.

However, the prior art as described above is to enter the PUK when the PIN is incorrectly input, but when the user does not remember or carry the PUK, the use of the mobile communication terminal is blocked so that only an emergency call can be made. There is a problem.

Therefore, even if the user does not remember or carry the PUK, if a user's identity is confirmed, a new method is provided to conveniently and stably receive the PUK.

Accordingly, an object of the present invention is to provide a method for authenticating a smart card for a subscriber identity module that can perform a convenient and safe authentication process by receiving a PUK using a network even if a PIN or a PUK is not remembered or carried.

According to an aspect of the present invention, there is provided a method for authenticating a smart card for a subscriber identity module inserted into a mobile communication terminal, the process in which the mobile communication terminal compares a PIN stored in the smart card with an input PIN; If the entered PIN does not match the PIN stored in the smart card, connecting the mobile communication terminal with a network providing the mobile communication service; and if the mobile communication terminal has a social security number or SSN input, When the social security number (SSN) is transmitted to a server, and the server of the network receives the social security number or SSN and compares with the stored social security number or SSN. Transmitting the stored PIN and the PUK to a mobile communication terminal; After receiving end sends the PIN and PUK from a network server, characterized in that If the PUK input of matching the PUK stored in the SIM card made of a process of performing a normal operation mode.

1 is a block diagram showing the internal configuration of a SIM card according to an embodiment of the present invention.

2 is a block diagram of a mobile communication terminal according to an embodiment of the present invention;

3 is a flowchart illustrating an initial registration method such as a PIN after inserting a SIM card into a first mobile communication terminal according to an embodiment of the present invention.

4 is a flowchart illustrating a method of authenticating a smart card for subscriber identity module inserted into a mobile communication terminal using a network according to an embodiment of the present invention.

Hereinafter, exemplary embodiments of the present invention will be described in detail with reference to the accompanying drawings. It should be noted that reference numerals and like elements among the drawings are denoted by the same reference numerals and symbols as much as possible even though they are shown in different drawings. In the following description of the present invention, if it is determined that a detailed description of a related known function or configuration may unnecessarily obscure the subject matter of the present invention, the detailed description thereof will be omitted.

1 is a block diagram showing the internal configuration of a SIM card according to an embodiment of the present invention, wherein the SIM card is composed of a memory chip 101 and a microprocessor 103. The memory chip 101 includes a personal authentication data storage unit 50 storing PIN and PUK related to personal authentication.

2 is a block diagram of a mobile communication terminal according to an embodiment of the present invention. Referring now to Figure 2 will be described the configuration and function of a mobile communication terminal according to an embodiment of the present invention. The mobile communication terminal according to the present invention includes a SIM card unit 700, a display unit 500, a key input unit 600 and a mobile communication service in which personal authentication data such as PIN and PUK are stored in addition to the basic components to be provided as a mobile communication terminal. It must be provided with a wireless unit 300 that can wirelessly transmit and receive data with the server of the network.

The controller 100 performs an overall control operation of the mobile communication terminal. In particular, in the present invention, when the wrong PIN is input a predetermined number of times, the controller 100 automatically attempts to connect to the network. The key input unit 600 includes a plurality of numeric keys and function keys, and outputs key data corresponding to a key pressed by the user to the controller 100. It also has a security setting menu navigation key and PIN active mode switching key. When the mobile communication terminal moves to the security setting menu, a security setting list such as a PIN active state mode is displayed on the display unit 500. The PIN active state mode is a mode for storing a PIN in the SIM card when a SIM card is first inserted into the mobile communication terminal. When the PIN is stored, the mobile communication terminal enters a PIN activation state. The wireless unit 300 wirelessly transmits data input from the key input unit 600 to a server of the network under the control of the controller 100, and receives personal authentication data from a server of the network. The display unit 500 displays various messages and the like under the control of the controller 100. For example, display the input window of PIN, PUK, social security number or SSN. The memory unit 200 includes a program memory and a data memory. The program memory stores program data necessary for controlling the operation of the mobile communication terminal, and the data memory stores data generated during control or during execution by a user.

3 is a flowchart illustrating an initial registration procedure after inserting a SIM card into a mobile terminal for the first time according to an embodiment of the present invention. An initial registration method such as a PIN will be described with reference to FIG. 3 as follows. In step 131, the security setting menu is selected, and the controller 100 of the mobile communication terminal moves to the security setting menu. When the PIN active mode switch key is input in step 133, the controller 100 switches the mobile communication terminal to the PIN active mode. Thereafter, when the PIN is input in step 135, the controller 100 stores the input PIN in the SIM card unit 700 in step 137. If the social security number or the SSN is input in step 139, the control unit 100 connects the mobile communication terminal and the network providing the mobile communication service through the wireless unit 300 in step 141. In step 143, the control unit 100 transmits the received PIN and social security number or SSN to the server of the network. In addition to the social security number or SSN, other personal identification numbers may be used. The server of the network stores a PIN and a social security number or SSN received from the mobile communication terminal. In step 145, the controller 100 releases the network connection and then switches the mobile communication terminal to a normal operation mode.

4 is a flowchart illustrating a method of authenticating a smart card for subscriber identity module inserted into a mobile communication terminal using a network according to an embodiment of the present invention. Hereinafter, the authentication method will be described with reference to FIG. 4.

The controller 100 of the mobile communication terminal checks whether the mobile communication terminal is in the PIN activation state in step 171 and proceeds to step 173 if it is activated. In step 173, a PIN is input, and in step 175, the controller 100 determines whether the input PIN matches the PIN stored in the SIM card unit 700. If the terminal operates normally and does not match, proceed to step 177. In step 177, the controller 100 checks the number of PIN input and proceeds to step 181 when the number of PIN input is 3, and proceeds to step 173 when the number of input is less than 3, and receives the PIN again. In the present invention, the number of PIN input times is limited to 3, but the limit on the number of PIN inputs may be changed, which should be understood to be within the scope of the present invention. The controller 100 connects the mobile communication terminal with a network providing a corresponding mobile communication service through the wireless unit 300 in step 181.

Thereafter, in step 183, a social security number or SSN is input. In step 185, the control unit 100 checks the number of input of the social security number or SSN. If the number of inputs is less than 5, the controller 100 proceeds to step 189. If the number of inputs is 5, the controller 100 proceeds to step 187. emergency) mode. In the emergency mode, the user cannot make a call other than an emergency call. On the other hand, if the number of input of the social security number or SSN is less than 5, in step 189, the control unit 100 transmits the input social security number or SSN to the server of the network. In step 191, the server of the network determines whether the social security number or SSN transmitted from the mobile communication terminal matches the social security number or SSN stored in the server of the network. Wait for the SSN or SSN to be sent. In the present invention, the number of input of the resident registration number, etc. is limited to 5, but the limit may be changed, and it should be understood that this is within the scope of the present invention.

On the other hand, if the social security number or the SSN matches, in step 193, the server of the network transmits the stored PIN and PUK to the mobile communication terminal. After receiving the PIN and the PUK, the user receives the PUK. When the PUK is input in step 195, the control unit 100 determines whether the input PUK matches the PUK stored in the SIM card unit 700 in step 197, and if it matches, proceeds to step 199. If the terminal operates normally and does not match, proceed to step 201. In step 201, the controller 100 checks the number of PUK inputs, and if the number of inputs is 10, the controller 100 switches to the emergency mode in step 203. If the number of inputs is less than 10, the control unit 100 proceeds to step 195. It is input again. In the present invention, the PUK input number is limited to 10, but the PUK input limit may be changed.

Meanwhile, in the detailed description of the present invention, specific embodiments have been described, but various modifications are possible without departing from the scope of the present invention. Therefore, the scope of the present invention should not be limited to the described embodiments, but should be defined not only by the scope of the following claims, but also by the equivalents of the claims.

As described above, even when the user does not remember or carry the PUK, if the user's identity is confirmed, the PIN and the PUK may be provided to conveniently and stably perform the authentication process.

Claims (2)

In the authentication method of the smart card for subscriber identity module inserted into the mobile communication terminal, Comparing, by the mobile terminal, a PIN stored in the smart card with an input PIN; Connecting the mobile communication terminal with a network providing a corresponding mobile communication service when the input PIN does not match the PIN stored in the smart card; Transmitting the social security number or SSN to the server of the network when the mobile communication terminal has an input of a social security number or SSN; The server of the network receives a social security number or SSN, and compares the stored social security number or SSN and transmits the stored PIN and PUK to the mobile communication terminal if the match is matched; And after the mobile communication terminal receives the PIN and the PUK from the server of the network, if there is an input of the PUK corresponding to the PUK stored in the SIM card, performing a normal operation mode. The method of claim 1, wherein the PIN, social security number or SSN stored in the server of the network is transmitted and stored with the PIN when initial personal information is registered in the smart card.