CN1913679A - Protection method and system for preventing fraudulent use of mobile terminal - Google Patents

Abstract

The mobile terminal anti-theft protection method and system of the present invention pre-stores the authentication serial number in the mobile terminal; the network side device performs legality authentication on the authentication serial number of the mobile terminal, and if the authentication fails, the mobile terminal The terminal is listed as an illegal user, so that when the mobile phone is lost or stolen, the mobile phone can be prohibited from using the network or locked through the operator's network. The authentication serial number (such as 128bit information digest) obtained by encrypting the IMEI number with MD5 is stored in the Flash memory with one-time programming OTP function. The authentication serial number (such as 128bit information digest) can only be written once, and it will When the content has been written; starting from the second write, the read content is not the written content. Through the authentication process of the mobile phone, the purpose of preventing number change after the mobile phone is lost or stolen is achieved.

Description

Protection method and system for anti-theft of mobile terminal

technical field

The invention relates to the anti-theft technology of a mobile terminal, in particular to a protection method and system for preventing a mobile terminal from being stolen after being stolen.

Background technique

The decline in the price of mobile phone products and the convenience of the product itself have made mobile phones an increasingly popular electronic product. It is understood that the total number of mobile phone users in the world has exceeded 1 billion, and is still showing a growing trend. The popularization of mobile phones and the easy-to-carry appearance of mobile phones also bring some problems, such as being easily lost or stolen. While causing direct economic losses to users, this type of problem, such as stealing a phone call; criminals can also use the loopholes in the original mobile phone software and hardware to change the "identity" identification number of the mobile phone, such as the IMEI number, so that criminals can escape. Wireless network system restrictions continue to use this illegal handheld device.

At present, technologies related to mobile phone anti-theft include the following:

(1) French patent FR2791509 provides a technology for preventing illegal use of mobile phones after being stolen by setting power-on passwords for mobile phones.

(2) Chinese patents 200310113647.7 and 03124196.4 provide a technology for protecting the SIM (Subscriber Identity Module) in the mobile phone to prevent the SIM card from being illegally used after the mobile phone is lost.

(3) Patent application No. 03148202.3 and patent No. 01802972.8. These two documents provide the technology of automatically reporting the loss to the owner after the mobile phone is lost.

In the above-mentioned prior art, after the mobile phone is lost, the illegal user cannot be prevented from continuing to use the mobile phone (even if the SIM card is replaced, the mobile phone cannot be allowed to continue to be used), and the mobile phone IMEI number cannot be illegally copied or changed (the IMEI number is illegally copied or changed). Copying or changing the number is one of the important reasons for "parallel import" mobile phones).

Contents of the invention

The invention provides a protection method and system for anti-theft of a mobile terminal, which realizes that the mobile terminal is lost or stolen, and the mobile phone can be locked or prohibited from using the network through the operator network.

The purpose of the present invention is achieved through the following technical solutions.

A protection method for anti-theft of a mobile terminal, comprising:

A. Pre-store the authentication serial number in the mobile terminal;

B. The network side device performs legality authentication on the authentication serial number of the mobile terminal, and lists the mobile terminal as an illegal user if the authentication fails.

Described step A comprises:

The authentication serial number includes the International Mobile Station Identity IMEI number.

The authentication serial number is stored in the Flash memory of the mobile terminal.

The authentication serial number is obtained by encrypting the IMEI number.

The encryption method is to use an encryption algorithm to encrypt the IMEI number according to the ID number of the hardware serial number to obtain the authentication serial number.

The authentication serial number is stored in the Flash memory with OTP function, and the authentication serial number is stored in the OTP area of the Flash memory with OTP function.

The non-volatile NV area of the Flash memory with one-time programming OTP function is used to save the IMEI number.

The method also includes:

C. The mobile terminal encrypts the IMEI number in the same way as obtaining the authentication serial number to obtain the authentication serial number;

D. The mobile terminal reads the authentication serial number and compares it with the authentication serial number. If they are the same, the mobile terminal is used normally; otherwise, the mobile terminal is automatically shut down.

Described step C comprises:

The mobile terminal reads the IMEI number from the NV area of the Flash memory with OTP function, and encrypts it in the same way as obtaining the authentication serial number to obtain the authentication serial number.

Described step D comprises:

The mobile terminal reads the authentication serial number from the OTP area of the Flash memory with the OTP function, and compares it with the authentication serial number. If they are the same, the mobile terminal is in normal use, otherwise, the mobile terminal automatically shuts down.

Described step B comprises:

The network-side device obtains the authentication serial number of the mobile terminal, and judges whether the authentication serial number is the same as the registration serial number of the mobile terminal stored in the network-side device. If not, it means that the authentication fails, and the mobile terminal is listed. for illegal users.

Described step B also includes:

Store the IMEI number of the mobile terminal in the server of the network side device as the registration serial number.

Described step B also includes:

For a mobile terminal listed as an illegal user, the network side device prohibits the mobile terminal from using the network or only allows the mobile terminal to receive information but does not allow the mobile terminal to send information.

A mobile terminal anti-theft system, comprising:

Authentication serial number storage unit: located at the mobile terminal, used to store the authentication serial number;

Legitimacy verification unit: set in the network side equipment, used for legality verification of the authentication serial number of the mobile terminal, and if the verification fails, the mobile terminal is listed as an illegal user.

The authentication serial number storage unit includes:

Flash memory: used to store the authentication serial number.

The Flash memory has a one-time programming OTP function, and is used to store the authentication serial number in the OTP area.

The system also includes:

Encryption module: located at the mobile terminal, used to encrypt the IMEI number with an encryption algorithm according to the hardware serial number ID number to obtain the authentication serial number or authentication serial number.

The system also includes:

Authentication module: installed at the mobile terminal, used to compare the authentication serial number and the authentication serial number, if they are the same, the mobile terminal is in normal use, otherwise, the mobile terminal will automatically shut down

The legality authentication unit includes:

Serial number registration module: used to register the IMEI number of the mobile terminal, and store it in the server of the network side device as the registration serial number;

Storage unit: used to save the registration serial number of the mobile terminal;

Legitimacy authentication module: used to obtain the authentication serial number of the mobile terminal, and determine whether the authentication serial number is the same as the registration serial number of the mobile terminal stored in the storage unit of the network side device, if not, it means that the authentication fails , listing the mobile terminal as an illegal user.

It can be seen from the technical scheme provided by the present invention above that the mobile terminal anti-theft protection method and system of the present invention pre-store the authentication serial number in the mobile terminal; Authentication, if the authentication fails, the mobile terminal is listed as an illegal user, so that when the mobile phone is lost or stolen, the mobile phone can be prohibited from using the network or locked through the network of the operator. The authentication serial number obtained by encrypting the IMEI number with MD5 is stored in the Flash memory with one-time programming OTP function. The authentication serial number can only be written once, and the content has been written when the mobile phone leaves the factory; from the second write After input, the content read is not the content written. Through the authentication process of the mobile phone, the purpose of preventing number change after the mobile phone is lost or stolen is achieved.

Description of drawings

Fig. 1 is the schematic diagram that mobile phone IMEI number is put into the designated server of network side equipment in the protection method that mobile terminal anti-theft uses of the present invention;

Fig. 2 is the schematic diagram that mobile phone IMEI number is encrypted and stored in the protection method of mobile terminal anti-theft according to the present invention;

Fig. 3 is the flow chart of the user requesting to lock the mobile phone after the mobile phone is lost in the protection method for preventing the use of the mobile terminal according to the present invention;

Fig. 4 is the flowchart one of mobile phone registration in the protection method of mobile terminal anti-theft according to the present invention;

Fig. 5 is the second flowchart of mobile phone registration in the protection method of mobile terminal anti-theft according to the present invention;

FIG. 6 is a schematic structural diagram of the mobile terminal anti-theft system according to the present invention.

Detailed ways

The present invention firstly relates to a method for protecting a mobile terminal against theft. Specifically, the authentication serial number is pre-stored in the mobile terminal; The above mobile terminal is listed as an illegal user. The authentication serial number pre-stored in the mobile terminal is the International Mobile Station Identity Number IMEI number; it can also be a 128-bit information summary generated after encrypting the IMEI number. The encryption method is to use an encryption algorithm (which can be MD5) based on the hardware serial number ID number ) to encrypt the IMEI number to obtain the above 128bit information summary.

The above-mentioned authentication serial number is stored in the Flash memory; it can also be stored in the Flash memory with one-time programming OTP function, and the authentication serial number (such as 128bit information summary) is stored in the OTP area of the Flash memory with OTP function .

The mobile terminal can also perform authentication processing. The specific method is that the mobile terminal encrypts the IMEI number in the same way as the authentication serial number (such as 128bit information summary) to obtain the authentication serial number; the mobile terminal reads the authentication serial number again. number (such as 128bit information digest), and compare it with the authentication serial number, if they are the same, then the mobile terminal is in normal use, otherwise, the mobile terminal will automatically shut down. For the case where the authentication serial number is stored in the Flash memory with the OTP function, the mobile terminal reads the IMEI number from the NV area of the Flash memory with the OTP function, and obtains the authentication serial number (such as 128bit information summary) by the same Encrypt it to obtain the authentication serial number. The mobile terminal reads the authentication serial number (such as 128bit information summary) from the OTP area of the Flash memory with OTP function again, and compares with the authentication serial number, if identical, then mobile terminal is normally used, otherwise, mobile terminal shuts down automatically.

The method for the network side device to verify the legality of the authentication serial number of the mobile terminal is that the network side device requires the mobile terminal to report the authentication serial number, and judges whether the authentication serial number is consistent with the registration serial number of the mobile terminal stored in the network side device. Whether they are the same, if not, it means that the authentication fails, and the mobile terminal is listed as an illegal user. Of course, the IMEI number of the mobile terminal needs to be stored in the server of the network side device as the registration serial number before. As for the mobile terminals listed as illegal users, the network side equipment prohibits the mobile terminals from using the network or only allows the mobile terminals to receive information but not to send information.

A kind of mobile terminal anti-theft protection method according to the present invention takes mobile phone as an example and its specific implementation process is as follows:

1. Pre-store the authentication serial number in the mobile terminal

As shown in Fig. 1, mobile phone IMEI number is uniformly put into the specific EIR server of network side equipment in the protection method of the kind of mobile terminal anti-theft of the present invention, before each mobile phone leaves the factory, mobile phone manufacturer can burn into a The unique serial number, that is, the IMEI (International Mobile station Equipment Identities International Mobile Station Identity) number, when the user buys a mobile phone, the dealer (or operator) must register the IMEI number in the register, and then deposit it in the EIR designated by the operator (Equipment Identity Registers equipment identification register) in the server.

The IMEI number stored in the mobile phone is the authentication serial number of the mobile phone, and the registered IMEI number stored in the EIR server is the registration serial number of the mobile phone.

The IMEI number in the mobile phone is a very important resource. To prevent illegal copying, and in order to prevent illegal copying of the IMEI and changing the IMEI number, the authentication serial number of the mobile phone can be encrypted and stored in the mobile phone with OTP (One Time Program-one time) In Flash with the function of programming), the authentication serial number is usually obtained by encrypting the IMEI number with an encryption algorithm based on the ID number of the hardware serial number. The specific method is shown in Figure 2:

When the mobile phone leaves the factory, according to the 128bit hardware serial number (ID number), the MD5 algorithm is used to encrypt the IMEI number, generate a 128bit information summary, and then write the summary to the OTP area of Flash, and write the original IMEI number at the same time To other areas of Flash (NV (non-volatile) item area).

The full name of MD5 above is message-digest algorithm 5 (message-digest algorithm 5), which was jointly developed by MIT Laboratory for computer science and RSA data encryption company (RSA dara security inc) in the early 1990s. It uses an irreversible string transformation algorithm to transform a byte string of any length into a certain long and unique large integer (128bit information digest). As long as the md5 is recalculated for the original string file, it will be found that the information digest is different, so it can be determined that an incorrect file is obtained. It is often used for digital signatures and account and password management.

2. The network side device authenticates the validity of the authentication serial number of the mobile terminal, and lists the mobile terminal as an illegal user if the authentication fails.

When the mobile phone is powered on, registered or making a call (calling or called), the wireless network identifies the legality of the user's identity based on the IMEI number, and only legitimate users are allowed to use the network. Specifically: the network side device obtains the authentication serial number of the mobile terminal, and judges whether the authentication serial number is the same as the registration serial number of the mobile terminal stored in the network side device, if not, it means that the authentication fails, and the Mobile terminals are listed as illegal users. Specifically, it can be divided into several situations.

(1) Request to lock the mobile phone when the user's mobile phone is lost or stolen

As shown in Figure 3: After the user finds that the mobile phone is lost or stolen, he can go to the service center of the operator and request to lock the mobile phone. The operator finds the IMEI number of the mobile phone from the EIR server according to the information provided by the user, and lists it in Blacklist, in the future the phone can only be used to receive messages, not send messages, and it can also be directly prohibited from using the Internet.

(2) The boot registration process of the mobile phone

As shown in Figure 4, the specific process is as follows:

Step 41, start the mobile phone to search the network, read system information, and the network side requires the mobile phone to report the IMEI number;

Step 42, the mobile phone reads the IMEI number from a specific area of Flash;

Step 43, the mobile phone sends the IMEI number to the network side;

Step 44, the network side searches the EIR server for whether the IMEI number has been registered, and reads the black and white list;

Step 45, judging whether the IMEI number is legal, if so, execute step 46, otherwise execute step 47;

The specific method is to compare the IMEI number with the black and white list to determine whether it is a legal or illegal user. If the mobile phone is stolen and the user has included it in the "blacklist", it is an illegal user; otherwise it is a legal user.

Step 46. Continue the normal startup registration process.

Step 47, the network side prohibits the mobile phone from registering and using the network.

In addition, the specific implementation of the mobile phone's own authentication process is shown in Figure 5:

Step 51, power on the mobile phone or perform other authentication processes;

Step 52, the mobile phone reads the unencrypted IMEI number from the NV area;

Step 53, execute the MD5 encryption algorithm; use the encryption algorithm MD5 to encrypt the IMEI number according to the hardware serial number ID number to obtain the authentication serial number;

Step 54, the mobile phone reads the encrypted IMEI information summary from the OTP area, which is the authentication serial number;

Step 55, compare whether the authentication serial number is the same as the authentication serial number, if yes, execute step 56, otherwise, execute step 57;

Step 56, start up normally or complete the authentication process;

Step 57, automatic shutdown.

Because of the Flash with OTP function, its OTP area (a dedicated area that can only be written once) has the following characteristics:

(1) It can only be programmed (written) once, and the content has been written when the mobile phone leaves the factory;

(2) Starting from the second writing, when the content written in the OTP area is read, it will cause inconsistency, that is, the read content is not the written content.

Due to the above characteristics of the OTP area, making:

The third party cannot change the existing content in the OTP, that is, the encrypted 128-bit information summary of the IMEI number cannot be changed; even if the third party successfully changes the original IMEI number in the NV (non-volatile item), the mobile phone starts/executes other During the authentication process, the power-on/authentication failure will also be caused due to the inconsistency between the information summary in the OTP and the new information summary generated after the IMEI is changed, so as to prevent the number change.

As shown in Figure 6, a mobile terminal anti-theft system according to the present invention includes:

The authentication serial number storage unit set at the mobile terminal and the legitimacy authentication unit set in the network side equipment, wherein,

The authentication serial number storage unit comprises a Flash memory, which is used to store the authentication serial number; the Flash memory can be a general memory, or a Flash memory with a one-time programming OTP function, which is used to transfer the authentication The serial number is stored in the OTP area.

The system can also include an encryption module, which is set at the mobile terminal, and the encryption module is used to encrypt the IMEI number with an encryption algorithm according to the hardware serial number ID number to obtain the authentication serial number or authentication serial number.

The system can also include an authentication module, which is set at the mobile terminal. The authentication module is used to compare the authentication serial number and the authentication serial number. If they are the same, the mobile terminal can be used normally; otherwise, the mobile terminal will automatically shut down

The legitimacy authentication unit set in the network side equipment is used to perform legitimacy authentication on the authentication serial number of the mobile terminal, and if the authentication fails, list the mobile terminal as an illegal user. Including serial number registration module, storage unit and legality authentication module, among which:

Serial number registration module: used to register the IMEI number of the mobile terminal, and store it in the server of the network side device as the registration serial number;

Storage unit: used to save the registration serial number of the mobile terminal; the present invention adopts the EIR (Equipment Identity Registers) server designated by the operator.

Legitimacy authentication module: used to obtain the authentication serial number of the mobile terminal, and determine whether the authentication serial number is the same as the registration serial number of the mobile terminal stored in the storage unit of the network side device, if not, it means that the authentication fails , listing the mobile terminal as an illegal user.

The above is only a preferred embodiment of the present invention, but the scope of protection of the present invention is not limited thereto. Any person skilled in the art can easily conceive of changes or modifications within the technical scope disclosed in the present invention. Replacement should be covered within the protection scope of the present invention. Therefore, the protection scope of the present invention should be determined by the protection scope of the claims.

Claims (19)

1. A protection method for anti-theft of a mobile terminal, comprising: A. Pre-store the authentication serial number in the mobile terminal; B. The network side device performs legality authentication on the authentication serial number of the mobile terminal, and lists the mobile terminal as an illegal user if the authentication fails. 2. The method for protecting against theft of a mobile terminal according to claim 1, wherein said step A comprises: The authentication serial number includes the International Mobile Station Identity IMEI number. 3. The mobile terminal anti-theft protection method according to claim 1 or 2, wherein the authentication serial number is stored in the Flash memory of the mobile terminal. 4. The protection method against theft of the mobile terminal according to claim 1, characterized in that: said authentication serial number is obtained by encrypting the IMEI number. 5. The method for protecting the mobile terminal against theft according to claim 4, wherein the encryption method is to encrypt the IMEI number with an encryption algorithm according to the ID number of the hardware serial number to obtain the authentication serial number. 6. The protection method of mobile terminal anti-theft according to claim 4, characterized in that, said authentication serial number is stored in a flash memory with one-time programming OTP function, and said authentication serial number is stored in a flash memory with a one-time programming OTP function. The OTP area of the Flash memory with the OTP function. 7. The anti-theft protection method of the mobile terminal according to claim 6, characterized in that, the non-volatile NV area of the Flash memory with the one-time programming OTP function is used to store the IMEI number. 8. The mobile terminal anti-theft protection method according to claim 4, 6 or 7, characterized in that said method further comprises: C. The mobile terminal encrypts the IMEI number in the same way as obtaining the authentication serial number to obtain the authentication serial number; D. The mobile terminal reads the authentication serial number and compares it with the authentication serial number. If they are the same, the mobile terminal is used normally; otherwise, the mobile terminal is automatically shut down. 9. The protection method against theft of a mobile terminal according to claim 8, wherein said step C comprises: The mobile terminal reads the IMEI number from the NV area of the Flash memory with OTP function, and encrypts it in the same way as obtaining the authentication serial number to obtain the authentication serial number. 10. The mobile terminal anti-theft protection method according to claim 8, wherein said step D comprises: The mobile terminal reads the authentication serial number from the OTP area of the Flash memory with the OTP function, and compares it with the authentication serial number. If they are the same, the mobile terminal is in normal use, otherwise, the mobile terminal automatically shuts down. 11. The method for protecting against theft of mobile terminals according to claim 1, wherein said step B comprises: The network-side device obtains the authentication serial number of the mobile terminal, and judges whether the authentication serial number is the same as the registration serial number of the mobile terminal stored in the network-side device. If not, it means that the authentication fails, and the mobile terminal is listed. for illegal users. 12. The method for protecting against theft of a mobile terminal according to claim 11, wherein said step B further comprises: Store the IMEI number of the mobile terminal in the server of the network side device as the registration serial number. 13. The mobile terminal anti-theft protection method according to claim 1 or 11, characterized in that said step B further comprises: For a mobile terminal listed as an illegal user, the network side device prohibits the mobile terminal from using the network or only allows the mobile terminal to receive information but does not allow the mobile terminal to send information. 14. A mobile terminal anti-theft system, comprising: Authentication serial number storage unit: located at the mobile terminal, used to store the authentication serial number; Legitimacy verification unit: set in the network side equipment, used for legality verification of the authentication serial number of the mobile terminal, and if the verification fails, the mobile terminal is listed as an illegal user. 15. The mobile terminal anti-theft system according to claim 14, wherein the authentication serial number storage unit comprises: Flash memory: used to store the authentication serial number. 16. The mobile terminal anti-theft system according to claim 15, wherein said Flash memory has a one-time programming OTP function, and is used to store said authentication serial number in the OTP area. 17. The mobile terminal anti-theft system according to claim 14, characterized in that said system further comprises: Encryption module: located at the mobile terminal, used to encrypt the IMEI number with an encryption algorithm according to the hardware serial number ID number to obtain the authentication serial number or authentication serial number. 18. The mobile terminal anti-theft system according to claim 14, 15, 16 or 17, characterized in that the system further comprises: Authentication module: installed at the mobile terminal, used to compare the authentication serial number and the authentication serial number, if they are the same, the mobile terminal is in normal use, otherwise, the mobile terminal will automatically shut down 19. The mobile terminal anti-theft system according to claim 14, wherein the legality authentication unit includes: Serial number registration module: used to register the IMEI number of the mobile terminal, and store it in the server of the network side device as the registration serial number; Storage unit: used to save the registration serial number of the mobile terminal; Legitimacy authentication module: used to obtain the authentication serial number of the mobile terminal, and determine whether the authentication serial number is the same as the registration serial number of the mobile terminal stored in the storage unit of the network side device, if not, it means that the authentication fails , listing the mobile terminal as an illegal user.

Images