System for preventing unauthorized use of recording media

This application is based on an application No. 2002-208398 filed in Japan, the content of which is hereby incorporated by reference.

(1) Field of the Invention

The present invention relates to a technology for preventing unauthorized use of a recording medium which is mountable to a terminal device.

(2) Description of the Related Art

In recent years, a system has been proposed that enables users to access information recorded on a recording medium with use of a terminal device to which the recording medium is mountable, such as a portable telephone.

JP 2001-134688 is a reference which discloses a system that includes a smartcard and a portable terminal device. Here, the smart card stores thereon user information and information relating to applications to be used, and the portable terminal device is equipped with an authentication unit that authenticates whether the user is authorized to use the portable terminal device.

In this system, when the smart card is mounted to the portable terminal device, authentication is performed to determine whether the user is the authorized user, with use of information inputted through the portable terminal device and information that is on the smart card. When the user is authenticated as the authorized user, the user will be allowed to access information written on the smart card.

However, with the aforementioned technology, the authentication unit within the portable terminal device is not protected against an unauthorized external attack. Therefore, there is a possibility that a malicious third party decodes the authentication unit of the portable terminal, and changes the authentication unit to always authenticate the third party to be the authorized user. Such tampering will allow third parties to access the information recorded on the recording medium.

The object of the present invention is to provide a recording medium that is protected against unauthorized use, that therefore has heightened security, and further to provide a terminal apparatus, a system, a method, and a program, for preventing unauthorized use of the recording medium.

In order to achieve the stated object, the present invention is a portable recording medium which includes a storage unit which stores therein storage authentication information for authenticating a user and has an area that corresponds to the storage authentication information, a judgment unit operable to judge whether to perform authentication, a reception unit operable to receive reception authentication information that authenticates a user if the judgment unit judges affirmative, an authentication unit that is tamper-resistant and is operable to judge whether or not the received reception authentication information matches the storage authentication information, and a process unit operable to permit use of the area if the reception authentication information is judged to match the storage authentication information.

According to this structure, the recording medium includes therein an authentication unit that is tamper resistant. Because of being tamer-resistant, the authentication unit will be prevented from being decoded or tampered by third parties. Accordingly, the recording medium is protected from third parties illegally using the area within the recording medium.

These and other objects, advantages and features of the invention will become apparent from the following description thereof taken in conjunction with the accompanying drawings that illustrate a specific embodiment of the invention. In the drawings:

FIG. 1 illustrates an overall structure of the recording-medium unauthorized use prevention system;

FIG. 2 is a block diagram illustrating the structure of a portable telephone 100 that relates to the first embodiment;

FIG. 3 is a block diagram illustrating the structure of a recording medium 300 that relates to the first embodiment;

FIG. 4 illustrates the data structure of the authentication information table T 300 of the first storage area 311 according to the first embodiment;

FIG. 5 illustrates the data structure of the process information table T 301 of the second storage area 312 according to the first embodiment;

FIG. 6 is a flowchart illustrating the operations for setting authentication information and process information, which relate to the first embodiment;

FIG. 7 is a flowchart illustrating the authentication operation that relates to the first embodiment;

FIG. 8 is a flowchart illustrating the user information reception operation;

FIG. 9 is a flowchart illustrating the access right setting operation;

FIG. 10 is a block diagram illustrating the structure of the portable telephone 100 A that relates to the second embodiment;

FIG. 11 is a block diagram illustrating the structure of the recording medium 300 A that relates to the second embodiment;

FIG. 12 illustrates the data structure of the authentication information table T 350 of the first storage area 311 A according to the second embodiment;

FIG. 13 illustrates the data structure of the communication information table T 351 of the third storage area 313 A according to the second embodiment;

FIG. 14 illustrates the data structure of the process information table T 352 of the second storage area 312 A according to the second embodiment;

FIG. 15 is a flowchart illustrating the operations for setting communication information, authentication information, and process information, which relate to the second embodiment;

FIG. 16 is a flowchart illustrating the authentication operation that relates to the second embodiment;

FIG. 17 is a flowchart illustrating the access right setting operation that relates to the second embodiment;

FIG. 18 is a block diagram illustrating the structure of the portable telephone 100 B that relates to the third embodiment;

FIG. 19 is a schematic circuit diagram of the connection unit 115 B of the portable telephone 100 B according to the third embodiment;

FIG. 20 is a block diagram illustrating the structure of the recording medium 300 B that relates to the third embodiment;

FIG. 21 illustrates the data structure of the history information table T 400 of the history information storage area 354 B according to the third embodiment;

FIG. 22 is a flowchart illustrating the operation for registering history information, which relates to the third embodiment;

FIG. 23 is a flowchart illustrating the authentication operation that relates to the third embodiment, which continues to FIG. 24 ;

FIG. 24 is a flowchart illustrating the authentication operation that relates to the third embodiment, which is a continuation from FIG. 23 ;

FIG. 25 is a flowchart illustrating the access right setting operation that relates to the third embodiment;

FIG. 26 illustrates the data structure of the table consisting of authentication information and process information;

FIG. 27 illustrates the data structure of a table consisting of authentication information, communication information, and process information, where there is only one piece of communication information; and

FIG. 28 illustrates the data structure of a table consisting of authentication information, communication information, and process information, where there are a plurality of pieces of communication information.

1. The First Embodiment

As the first embodiment according to the present invention, a recording-medium unauthorized use prevention system 1 is described as follows.

1.1 The Structure of the Recording-Medium Unauthorized Use Prevention System 1

As shown in FIG. 1 , the recording-medium unauthorized use prevention system 1 is comprised of portable telephones 100 and 200 , an IC-function equipped recording medium (herein after simply “recording medium”) 300 to which each portable telephone is mountable.

The recording medium 300 is mounted to a portable telephone 100 , for use. Likewise, the recording medium 300 can be mounted to the portable telephone 200 , for use.

1.2 The Structure of the Portable Telephone 100

In this section, the structure of the portable telephone 100 is described.

As shown in FIG. 2 , the portable telephone 100 is comprised of an output unit 101 , an input unit 102 , a radio unit 103 , a baseband signal process unit 104 , a speaker 105 , a microphone 106 , a fingerprint input unit 107 , a control unit 108 , an input/output unit 109 , and a power supply unit 110 .

The portable telephone 100 is specifically a computer system comprised of a microprocessor, a ROM, a RAM, a display unit, and the like. The ROM stores thereon a computer program. The portable telephone 100 pursues its function by the microprocessor performing according to the computer program.

The portable telephone 200 has the same structure as the portable telephone 100 , therefore the description thereof is omitted.

(1) The Output Unit 101

The output unit 101 outputs display of data according to the instruction by the control unit 108 .

The output unit 101 , upon receiving from the control unit 108 input-means information for inquiring about which input means to be used in authentication in relation to the recording medium 300 , outputs a message inquiring about which input means to be used in authentication.

The output unit 101 , if it receives from the control unit 108 a character input request, outputs a message prompting the user to input character information. The character input request specifically requests input of character information that is composed of a combination of one or more numbers, alphabets, and signs, and is used for proving that he is the authorized user of the recording medium 300 . If the output unit 101 receives from the control unit 108 a fingerprint input request, it outputs a message prompting the user to input fingerprint information. The fingerprint input request specifically requests input of fingerprint information that exhibits characteristics of the fingerprint of the user, and is used for proving that the user is the authorized user of the recording medium 300 .

Further, the output unit 101 , upon receiving authentication-impossible information showing that there is no information within the recording medium 300 that matches the character information, the fingerprint information, or the combination of character information and fingerprint information, having been received from the input unit 102 , outputs a message reporting that there is no matching information within the recording medium 300 .

(2) The Fingerprint Input Unit 107

The fingerprint input unit 107 has a fingerprint sensor that reads the fingerprint pattern of the user, generates from the fingerprint pattern fingerprint information composed of characteristic points of the fingerprint pattern, and outputs the generated fingerprint information to the control unit 108 .

Specifically, the characteristic points of the fingerprint pattern are (1) direction of ridges and bifurcations or the like, and (2) relative position for the end of ridges and bifurcations, or the like.

(3) The Input Unit 102

The input unit 102 is comprised of a touch panel, a keyboard having ten key input function, and the like, and outputs to the control unit 108 an input instruction from the user, the input instruction including coordinates information showing the location at the touch panel that has been pushed, and a key operation signal generated by a key input through the keyboard.

The input unit 102 receives input of authentication-start information that indicates to start authentication in relation to the recording medium 300 , and also receives input of other kinds of information. The input unit 102 outputs the authentication-start information and the other kinds of information to the control unit 108 .

The input unit 102 , when the output unit 101 outputs a message inquiring about an input means of information that is necessary for authentication, receives one of first input information, second input information, and third input information. The first information indicates that information necessary for authentication will be input through the input unit 102 ; the second input information indicates that such information will be input through the fingerprint input unit 107 ; and the third input information indicates that such information will be input through both the input unit 102 and the fingerprint input unit 107 . The input unit 102 then outputs the received one of the first, second, or third information to the control unit 108 .

Furthermore, the input unit 102 , when the output unit 101 outputs a message prompting the user to input character information, receives the input of such character information which is used for proving that he is the authorized user of the recording medium 300 , and outputs the received character information to the control unit 108 .

(4) The Radio Unit 103

The radio unit 103 is equipped with an antenna 120 , and transmits/receives radio signals.

(5) The Baseband Signal Process Unit 104

The baseband signal process unit 104 processes a signal received from the radio unit 103 to output it to the speaker 105 , and processes an audio received from the microphone 106 to output it to the radio unit 103 .

(6) The Speaker 105

The speaker 105 outputs the audio processed at the baseband signal process unit 104 .

(7) The Microphone 106

The microphone 106 receives an audio of the user, and outputs the audio to the baseband signal process unit 104 .

(8) The Control Unit 108

The control unit 108 controls the portable telephone 100 as a whole.

The control unit 108 , upon receiving authentication-start information or other kinds of information from the input unit 102 , outputs the authentication-start information or the other kinds of information to the recording medium 300 via the input/output unit 109 . Further, the control unit 108 , upon receiving the input-means information from the recording medium 300 via the input/output unit 109 , outputs the received input-means information to the output unit 101 .

Furthermore, the control unit 108 , when it receives from the input unit 102 , one of the first, second, and third input information, outputs the received one of the first, second, and third input information, to the recording medium 300 via the input/output unit 109 . The control unit 108 , upon receiving from the recording medium 300 either a character input request or a fingerprint input request, outputs the received one of the character input request and the fingerprint input request to the output unit 101 .

The control unit 108 receives character information or fingerprint information, which identifies the user, and outputs the received one of the character information and fingerprint information, to the recording medium 300 via the input/output unit 109 . Further, the control unit 108 , upon receiving authentication-impossible information from the recording medium 300 , outputs the received authentication-impossible information to the output unit 101 .

The control unit 108 includes a memory, which is operable to store data and program, the data including input instructions received from the input unit 102 and content which has been processed by the control unit 108 , and the program including a variety of process programs and a variety of application programs that are to be executed. The control unit 108 , when using data of the recording medium 300 , receives the data from the recording medium 300 , and records the received data to this memory.

For example, when there is, via the input unit 102 , an instruction from a user that a game stored in the recording medium 300 should be executed, the control unit 108 receives data necessary for execution of the game from the recording medium 300 , records it on the memory, and executes the game processing with use of the recorded data.

(9) The Input/Output Unit 109

The input/output unit 109 performs input/output of information with the recording medium 300 , after the recording medium 300 has been inserted to a slot provided for the portable telephone 100 , and with use of the slot as an interface.

(10) The Power Supply Unit 110

The power supply unit 110 supplies power voltage to each part constituting the portable telephone 100 , and to the recording medium 300 .

1.3 The Structure of the Recording Medium 300

In this section, the structure of the recording medium 300 is described.

As shown in FIG. 3 , the recording medium 300 is comprised of a storage area 310 , a control unit 320 , a setting unit 330 , and an input/output unit 340 .

The recording medium 300 is specifically a computer system which is comprised of a microprocessor, a ROM, a RAM, and the like. The ROM stores thereon a computer program. The recording medium 300 pursues its function by the microprocessor performing according to the computer program.

(1) The Storage Area 310

The storage area 310 includes a first storage area 311 , a second storage area 312 , and a process-name storage area 315 . The storage area 310 further includes a memory A 361 , a memory B 362 , and a game 363 , which are respectively data accessible to a user. Note here that the memory A 361 , the memory B 362 , and the game 363 have been stored in the recording medium 300 before purchase.

(a) The First Storage Area 311

The first storage area 311 has an authentication information table T 300 , one example of which is shown in FIG. 4 .

This authentication information table T 300 stores thereon at least one set of an authentication number and authentication information.

The authentication number is a number assigned to each piece of authentication information.

The authentication information is for identifying the authorized user of the recording medium 300 , which is necessary for judging whether to allow access to the recording medium. The authentication information is specifically one of character information, fingerprint information, and a combination of character information and fingerprint information.

It should be noted here that “N.A.” in FIG. 4 represents that the authentication information is not necessary. Hereinafter, the authentication number that corresponds to the authentication information of “N.A.” is referred to as “authentication-unnecessary number”.

(b) The Second Storage Area 312

The second storage area 312 has a process-information table T 301 , an example of which is shown in FIG. 5 .

The process-information table T 301 stores thereon at least one set of a process number and process information.

The process number is a number assigned to each piece of process information.

The process information shows a name of a process which becomes accessible after authentication.

An authentication number and the corresponding process number are assigned a same number, so as to associate the authentication information and the corresponding process information.

The process names registered in the process information include “memory A”, and “memory B”, each of which correspond to the names of the memory A 361 and the memory B 362 , and “game” that corresponds to the name of the game 363 . If “memory A” has been registered as the process name, such processes are enabled as referring to, changing, and deleting the content of the data files within the memory A 361 , and registering a new data file to the memory A 361 . The same thing as the aforementioned case of “memory A” applies to the case in which “memory B” has been registered.

If “game” has been registered, it enables use of program data and data files necessary for the execution of the game 363 . The game is executed by using the program data and the data files.

(c) The Process-Name Storage Area 315

The process-name storage area 315 stores thereon process-in-use information identifying the process names of processes that are currently made accessible after the authentication was performed in relation to the recording medium 300 .

Please note here that, after the purchase of the recording medium 300 and until the first authentication is performed, no process-in-use information is stored in the process-name storage area 315 .

(2) The Setting Unit 330

The setting unit 330 is tamper-resistant, and includes therein an authentication-information setting unit 331 and a process-information setting unit 332 .

(a) The Authentication-Information Setting Unit 331

The authentication-information setting unit 331 registers authentication information received through an external terminal, into the first storage area 311 , either at the time when the recording medium 300 is purchased or at the time when usage is commenced. Here, the external terminal is a terminal located at a sales office selling the recording medium 300 .

The authentication-information setting unit 331 receives, as authentication information, one of character information, fingerprint information, or a combination of character information and fingerprint information, that is to be registered into the first storage area 311 from the external terminal via the input/output unit 340 , then judges whether or not the received authentication information has been registered in the authentication information table T 300 . If the authentication information has not been registered, the authentication-information setting unit 331 calculates an authentication number for the authentication information to be registered, and registers the authentication information with the calculated authentication number into the authentication information table T 300 of the first storage area 311 . Note here that the authentication-information setting unit 331 temporarily stores the calculated authentication number in order to be referred to by the process-information setting unit 332 .

Please note that judgment of whether or not the received authentication information has been already registered in the authentication information table T 300 is performed as follows.

If the received authentication information consists of only character information, judgment is performed by searching for information matching the received character information within the authentication information table T 300 .

If the received authentication information consists of only fingerprint information, judgment is performed by searching for information matching the received fingerprint information within the authentication information table T 300 . Here, the information matching the received fingerprint information is information that matches 80% or more of the characteristic points of the fingerprint pattern of the received fingerprint information.

If the received authentication information consists of both of character information and fingerprint information, judgment is performed by searching for information matching both the character information and the fingerprint information, within the authentication information table T 300 . Here, the information matching both the character information and the fingerprint information is information that perfectly matches the received character information, and that matches 80% or more of the characteristic points of the fingerprint pattern of the received fingerprint information.

(b) The Process-Information Setting Unit 332

The process-information setting unit 332 registers process information received through the external terminal into the second storage area 312 , either at the time when the recording medium 300 is purchased, or at the time when usage is commenced.

The process-information setting unit 332 receives process information to be registered to the second storage area 312 , from the input/output unit 340 via the control unit 320 , and acquires the value of the temporarily stored authentication number as process number. The process-information setting unit 332 then registers the acquired process number and the received process information into the process information table T 301 of the second storage area 312 , and the data relating to the acquired process information to the storage area 310 . In registration, the process-information setting unit 332 sets the process for the process name to be registered to a state in which it is impossible to be used.

According to the above-described operations, the authentication information and the process information are associated with each other.

(3) The Control Unit 320

The control unit 320 is tamper-resistant, and includes therein an authentication unit 321 and a process unit 322 .

The control unit 320 receives authentication-start information and other kinds of information, from the portable telephone 100 via the input/output unit 340 . Upon receiving information from the portable telephone 100 , the control unit 320 judges whether or not the received information is authentication-start information. If it is judged that the received information is authentication-start information, the control unit 320 outputs the received authentication-start information to the authentication unit 321 , and instructs the authentication unit 321 to start authentication. If the received information is judged to not be authentication-start information, authentication will not be performed.

(a) The Authentication Unit 321

The authentication unit 321 , upon receiving authentication-start information from the control unit 320 , outputs input-means information to the portable telephone 100 via the input/output unit 340 .

The authentication unit 321 , if receiving first input information from the portable telephone 100 via the input/output unit 340 , outputs a character input request to the portable telephone 100 via the input/output unit 340 , then receives character information from the portable telephone 100 via the input/output unit 340 .

The authentication unit 321 , if receiving second input information from the portable telephone 100 via the input/output unit 340 , outputs a fingerprint input request to the portable telephone 100 via the input/output unit 340 , then receives fingerprint information from the portable telephone 100 via the input/output unit 340 .

The authentication unit 321 , if receiving third input information from the portable telephone 100 via the input/output unit 340 , first outputs a character input request to the portable telephone 100 via the input/output unit 340 , and receives character information from the portable telephone 100 via the input/output unit 340 . Next, the authentication unit 321 outputs a fingerprint input request to the portable telephone 100 via the input/output unit 340 , and receives fingerprint information from the portable telephone 100 via the input/output unit 340 .

The authentication unit 321 receives, from the portable telephone 100 via the input/output unit 340 , one of character information, fingerprint information, or a combination of character information and fingerprint information identifying the user. Then the authentication unit 321 performs authentication by judging whether or not authentication information matching the received information exists within the authentication information table T 300 .

If receiving character information, the authentication unit 321 judges whether or not authentication matching the received character information exists in the authentication information table T 300 . Here, the authentication information matching the received character information is authentication information that perfectly matches the received character information.

If receiving fingerprint information, the authentication information unit 321 judges whether or not authentication information matching the received fingerprint information exists in the authentication information table T 300 . Here, the authentication information matching the received fingerprint information is authentication information that matches 80% or more of the characteristic points of the fingerprint pattern of the received fingerprint information.

If receiving both character information and fingerprint information, the authentication unit 321 judges whether or not authentication information matching both the character information and the fingerprint information exists in the authentication information table T 300 . Here, the authentication information matching both the character information and the fingerprint information is authentication information that perfectly matches the received character information, and that matches 80% or more of the characteristic points of the fingerprint pattern of the received fingerprint information.

Please note that information received from the portable telephone 100 at the time of authentication is herein after referred to as “user information.” This user information is information that identifies a user, and is represented by one of character information, fingerprint information, or a combination of character information and fingerprint information.

If authentication information matching the received user information exists in the authentication information table T 300 , the authentication unit 321 acquires the authentication number of the authentication information and outputs it to the process unit 322 .

If authentication information matching the received user information does not exist in the authentication information table T 300 , the authentication unit 321 generates authentication-impossible information and outputs it to the portable telephone 100 via the input/output unit 340 . If the authentication information table T 300 has information whose authentication information is “N.A.”, the corresponding authentication number is acquired and output to the process unit 322 .

Please note here that, if only character information is received, the authentication information matching the received user information is authentication information that matches the received character information; and if only fingerprint information is received, it is authentication information that matches the received fingerprint information; and if both character information and fingerprint information are received, it is authentication information that matches both the character information and the authentication information that have been received.

(b) The Process Unit 322

The process unit 322 receives an authentication number from the authentication unit 321 .

In the meantime, the process unit 322 judges whether or not the process-name storage area 315 stores thereon process-in-use information. If the judging is affirmative, the process unit 322 reads the process-in-use information from the process-name storage area 315 , to acquire the name of the process that is permitted for use. Then the process unit 322 sets access right so that the process corresponding to the acquired process name is inaccessible.

Further, the process unit 322 acquires from the process information table T 301 process information corresponding to the process number that matches the received authentication number, and sets access rights so that the process for the process name registered in the acquired process information is accessible. Further, the process unit 322 updates the process-name storage area 315 so that the process-in-use information is replaced by the process name registered in the acquired process information.

For example, if the process name registered in the acquired process information is “game”, access rights are set so that only “game” is accessible for execution.

By the above operation, only a process for the process name that corresponds to the authentication information is enabled to be used.

After the authentication and while the portable telephone performs the process set which is to be accessible, the process unit 322 performs control between the portable telephone 100 and the process set to be accessible, by performing read/write of data to/from the process set to be accessible.

(4) The Input/Output Unit 340

The input/output unit 340 receives information either from the portable telephone 100 or from an external terminal, and according to the content of the received information, outputs it either to the control unit 320 , or to the setting unit 330 via the control unit 320 .

The input/output unit 340 also receives information from the control unit 320 , and outputs the received information to the portable telephone 100 .

1.4. The Operations of the Recording-Medium Unauthorized Use Prevention System 1

In this section, each operation of the recording-medium unauthorized use prevention system 1 is described.

(1) The Setting Operations for Authentication Information and Process Information

Here, the operations for setting authentication information and process information are described with reference to the flowchart of FIG. 6 .

The authentication-information setting unit 331 receives, from the input/output unit 340 , authentication information having been input from the external device (Step S 1 ). Then it judges whether or not the received authentication information has already been registered in the authentication information table T 300 (Step S 3 ). If the authentication information has already been registered the operation ends. If the authentication information has not yet been registered, the authentication-information setting unit 331 calculates an authentication number with use of the authentication table T 300 , registers the calculated authentication number and the received authentication information in the authentication information table T 300 of the first storage area 311 , and also temporarily stores thereon the authentication number in order to be referred to by the process-information setting unit 332 (Step S 5 ).

The process-information setting unit 332 receives, from the input/output unit 340 , process information input from the external device, and sets the temporarily stored authentication number to be the process number, registers the process number and the received process information in the process information table T 301 , and sets the process whose process name has just been registered, to be inaccessible (Step S 10 ).

Note here that the process information registered at Step S 10 may be process information unregistered in the process information table T 301 , and also may be process information already registered in the process information table T 301 .

(2) The Authentication Operation

Here, the authentication operation is described with reference to the flowchart shown in FIG. 7 .

The control unit 320 receives information from the portable telephone 100 (Step S 45 ), and judges whether or not the received information is authentication-start information (Step S 48 ). If it is judged not to be authentication-start information, authentication will not be performed. If it is judged to be authentication-start information, the control unit 320 outputs the authentication-start information to the authentication unit 321 (Step S 50 ). Upon receiving the authentication-start information from the control unit 320 , the authentication unit 321 outputs input-means information to the portable telephone 100 , and receives, from the portable telephone 100 , one of first input information, second input information, or third input information (Step S 51 ). The authentication unit 321 performs operation for receiving user information (Step S 52 ).

Next, the authentication unit 321 judges whether authentication information that matches the received user information exists in the authentication information table T 300 (Step S 55 ).

If such authentication information matching the received user information exists, the authentication unit 321 acquires the authentication number that corresponds to the authentication information from the authentication information table T 300 , and outputs the acquired authentication number to the process unit 322 (Step S 60 ). The process unit 322 performs an operation for setting access rights (Step S 65 ).

If such authentication information matching the received user information does not exist, the authentication unit 321 generates authentication-impossible information, and outputs the generated authentication-impossible information to the portable telephone 100 via the input/output unit 340 (Step S 70 ). Next, the authentication unit 321 judges whether or not an authentication-unnecessary number exists in the authentication information table T 300 (Step S 75 ). If such authentication-unnecessary number exists, the authentication unit 321 acquires the authentication-unnecessary number, and outputs it to the process unit 322 (Step S 80 ). The process unit 322 performs operation for setting access right (Step S 83 ).

If there is no authentication-unnecessary number, the operation ends.

(3) The User Information Reception Operation

Here, the operation for the user information reception process performed at Step S 52 of FIG. 7 is described with reference to the flowchart shown in FIG. 8 .

The authentication unit 321 judges whether the information received from the portable telephone 100 is first input information or not (Step S 85 ). If the received information is first input information, the authentication unit 321 outputs a character input request to the portable telephone 100 , and receives character information from the portable telephone 100 (Step S 86 ). Note here that until character information is received as user information at Step S 86 , the operation is in a state of waiting to receive character information.

If the received information is not first input information, the authentication unit 321 judges whether or not it is second input information (Step S 87 ). If the received information is second input information, the authentication unit 321 outputs a fingerprint input request to the portable telephone 100 , and receives fingerprint information from the portable telephone 100 (Step S 88 ). Note here that until fingerprint information is received as user information at Step 88 , the operation is in a state of waiting to receive fingerprint information.

If the received information is not second information, the authentication unit 321 outputs a character input request to the portable telephone 100 , and receives character information from the portable telephone 100 (Step S 89 ), and then outputs a fingerprint input request to the portable telephone 100 , and receives fingerprint information from the portable telephone 100 (Step S 90 ). Note here that until character information is received at Step S 89 , the operation is in a state of waiting to receive character information, and that until fingerprint information is received at Step S 90 , the operation is in a state of waiting to receive fingerprint information.

(4) The Access Right Setting Operation

Here, the access right setting operation performed at Step S 65 and Step S 83 shown in FIG. 7 is descried with reference to the flowchart shown in FIG. 9 .

The process unit 322 receives an authentication number from the authentication unit 321 (Step S 93 ). Next, the process unit 322 judges whether or not process-in-use information exists (Step S 94 ).

If process-in-use information exists, the process unit 322 reads the process-in-use information from the process-name storage area 315 , acquires the process name of the process that has been made accessible, and sets access right so that the process corresponding to the acquired process name is made inaccessible (Step S 95 ). Further, the process unit 322 acquires from the process information table T 301 process information that corresponds to the process number that matches the authentication number received at Step S 93 , sets access right to the process corresponding to the process name registered in the acquired process information, so that the process will become accessible (Step S 96 ). The process unit 322 updates the process-in-use information in the process-name storage area 315 , with use of the process name registered in the process information acquired at the Step S 96 (Step S 97 ).

If process-in-use information does not exist, the operation from Step S 96 will be performed.

(5) Examples of Authentication Operation

Here, a specific flow of the authentication operation is described with reference to each table shown in FIG. 4 and FIG. 5 .

The authentication unit 321 , upon receiving, from the portable telephone 100 , fingerprint information and character information “PW 3 ” as user information, acquires the authentication number “ 4 ” from the authentication information table T 300 . The process unit 322 acquires, from the process information table T 301 , process information in which “memory A+B” and “game” are registered as the process name, with use of the process number “ 4 ” that matches the authentication number “ 4 ”, thereby setting access right to the memory A+B and to the game, so that they become accessible.

When receiving character information “PW 2 ” as user information, the authentication unit 321 makes the memory A and the game accessible.

When receiving character information “PW 5 ” as user information, the authentication unit 321 outputs to the portable telephone 100 a message reporting that there is no authentication information that matches the “PW 5 ” in the authentication information table T 300 . Then, the authentication unit 321 judges whether or not an authentication-unnecessary number exists in the authentication information table T 300 . Since this example has an authentication-unnecessary number, the authentication unit 321 acquires “ 1 ” which is the authentication-unnecessary number. The process unit 322 acquires, from the process information table T 301 , process information whose registered process name is “memory A” with use of the process number “ 1 ” that corresponds to the authentication number “ 1 ”, thereby setting access rights to the memory A to make it accessible.

The above operations enable setting of different authentication information to information of different importance levels, by classifying information relating to the memory A and memory B according to importance level.

1.5 Summary of the First Embodiment

As described above, the recording-medium unauthorized use prevention system 1 has, within the recording medium 300 , an authentication unit 321 that is tamper-resistant. This makes it difficult for third parties to encode or tamper with the authentication system of the authentication unit. Therefore, unauthorized access of third parties to the recording medium 300 is prevented.

In addition, the recording medium 300 stores thereon one or more pieces of authentication information, and further one or more pieces of process information that each correspond to a piece of authentication information. Therefore, the authentication information makes it possible to restrict accessible data, unlike conventionally where one authentication is enough for using all the data stored in the recording medium. By this arrangement, the recording medium 300 has heightened security for the owner.

2. The Second Embodiment

As the second embodiment according to the present invention, a recording-medium unauthorized use prevention system 2 is described as follows.

2.1 The Structure of the Recording-Medium Unauthorized Use Prevention System 2

The recording-medium unauthorized use prevention system 2 has the same structure as the recording-medium unauthorized use prevention system 1 , and is comprised of portable telephones 100 A, 200 A, and a recording medium 300 A to which each portable telephone is mountable.

The recording medium 300 A stores thereon at least one piece of communication information that represents a telephone number which is used when the portable telephone 100 A is used as a communication device. The process means is associated with both the communication information and authentication information.

The portable telephone 100 A accepts an input of communication information from the recording medium 300 A, and an input of user information, acquires process information that corresponds to both the accepted communication information and the authentication information that matches the received user information, and permits use of the process name registered in the acquired process information.

The recording medium 300 A can be also mounted to the portable telephone 200 A, for use.

In this section, the description mainly focuses on the differences with the recording-medium unauthorized use prevention system 1 .

2.2 The Structure of the Portable Telephone 100 A

In this section, the structure of the portable telephone 100 A is described.

Because the portable telephone 100 A has a similar structure to the portable telephone 100 of the first embodiment, the difference between them will be mainly described.

As shown in FIG. 10 , the portable telephone 100 A is comprised of an output unit 101 A, an input unit 102 A, a radio unit 103 A, a baseband signal process unit 104 A, a speaker 105 A, a microphone 106 A, a fingerprint input unit 107 A, a control unit 108 A, an input/output unit 109 A, and a power supply unit 110 A.

The portable telephone 100 A is specifically a computer system comprised of a microprocessor, a ROM, a RAM, a display unit, and the like. The ROM stores thereon a computer program. The portable telephone 100 A performs functions by using the microprocessor which performs according to the computer program.

The portable telephone 200 A has the same structure as the portable telephone 100 A, therefore the description thereof is omitted.

(1) The Output Unit 101 A

The output unit 101 A receives, from the recording medium 300 A, list information having at least one piece of communication information that the user owns, displays a list of the communication information that the user owns, with use of the received list information, and prompts the user to input number-to-be used information that indicates the communication information that the user wants to use.

Further, if the output unit 101 A receives, from the recording medium 300 A, combination-impossible information indicating that there is no process information corresponding to both the number-to-be used information and the authentication information, the output unit 101 A outputs a message reporting that there is no process information corresponding to both the number-to-be used information and the user information.

The output unit 101 A also outputs the same type of messages as the output unit 101 of the first embodiment.

(2) The Fingerprint Input Unit 107 A

The fingerprint input unit 107 A is the same as the fingerprint input unit 107 of the first embodiment, therefore a description thereof is omitted.

(3) The Input Unit 102 A

The input unit 102 A is comprised of a touch panel, a keyboard having a ten key input function, and the like, and outputs to the control unit 108 A an input instruction from the user, the input instruction including coordinate information showing the location at the touch panel that has been pushed, and a key operation signal generated by a key input through the keyboard.

When the list of communication information is displayed by the output unit 101 A, the input unit 102 A accepts number-to-be used information showing the communication information that the user wants to use, and outputs the accepted number-to-be used information to the control unit 108 A.

The input unit 102 A also accepts inputs of the same types of information as the input unit 102 of the first embodiment, and outputs these pieces of accepted information to the control unit 108 A.

(4) The Radio Unit 103 A

The radio unit 103 A is the same as the radio unit 103 of the first embodiment, therefore the description thereof is omitted.

(5) The Baseband Signal Process Unit 104 A

The baseband signal process unit 104 A is the same as the baseband signal process unit 104 of the first embodiment, therefore the description thereof is omitted.

(6) The Speaker 105 A

The speaker 105 A is the same as the speaker 105 of the first embodiment, therefore the description thereof is omitted.

(7) The Microphone 106 A

The microphone 106 A is the same as the microphone 106 of the first embodiment, therefore the description thereof is omitted.

(8) The Control Unit 108 A

The control unit 108 A controls the portable telephone 100 A as a whole.

The control unit 108 A, upon receiving the list information from the recording medium 300 A, outputs the received list information to the output unit 101 A. The control unit 108 A also receives number-to-be used information from the input unit 102 A, and outputs the received number-to-be used information to the recording medium 300 A.

The control unit 108 A also receives, from the recording medium 300 A, the same types of information as the control unit 108 of the first embodiment, and outputs these pieces of received information to the output unit 101 A. Furthermore, the control unit 108 A receives, from the input unit 102 A, the same types of information as the control unit 108 A of the first embodiment, and outputs the pieces of received information to the recording medium 300 A.

Further, the control unit 108 A, upon receiving combination-impossible information from the recording medium 300 A, outputs the received combination-impossible information to the output unit 101 A.

In addition, the control unit 108 A includes a memory just as the control unit 108 of the first embodiment does.

(9) The Input/Output Unit 109 A

The input/output unit 109 A is the same as the input/output unit 109 of the first embodiment, therefore the description thereof is omitted.

(10) The Power Supply Unit 110 A

The power supply unit 110 A is the same as the power supply unit 110 of the first embodiment, therefore the description thereof is omitted.

2.3 The Structure of the Recording Medium 300 A

In this section, the structure of the recording medium 300 A is described.

As shown in FIG. 11 , the recording medium 300 A is comprised of a storage area 310 A, a control unit 320 A, a setting unit 330 A, and an input/output unit 340 A.

The recording medium 300 A is specifically a computer system which is comprised of a microprocessor, a ROM, a RAM, and the like. The ROM stores thereon a computer program. The recording medium 300 A performs functions by using the microprocessor which performs according to the computer program.

(1) The Storage Area 310 A

The storage area 310 A includes a first storage area 311 A, a second storage area 312 A, a third storage area 313 A, and a process-name storage area 315 A. The storage area 310 A further includes a memory A 361 A, a memory B 362 A, a game 363 A, a communication function 364 A, and an electronic commerce function 365 A, that are respectively either data or function accessible to a user. Note here that the memory A 361 A, the memory B 362 A, the game 363 A, the communication function 364 A, and the electronic commerce function 365 A have been stored in the recording medium 300 A before purchase.

(a) The First Storage Area 311 A

The first storage area 311 A has an authentication information table T 350 , one example of which is shown in FIG. 12 .

This authentication information table T 350 stores thereon at least one set of an authentication number and authentication information.

Each set of items therein is the same as that in the authentication information table T 300 of the first embodiment, therefore further description is omitted.

(b) The Third Storage Area 313 A

The third storage area 313 A has a communication information table T 351 , one example of which is shown in FIG. 13 .

The communication information table T 351 stores thereon at least one set of a communication number and communication information. The communication number is a number assigned to each piece of communication information. The communication information is a telephone number used when the portable telephone 100 A is used as a telephone.

(c) The Second Storage Area 312 A

The second storage area 312 A has a process information table T 352 , one example of which is shown in FIG. 14 .

The process information table T 352 stores thereon at least one set of a process number and process information.

The process number is composed of first number and second number. A set of a first number and a second number uniquely identifies a piece of the process information. Each first number represents a communication number, and each second number represents an authentication number.

The process information shows a name of a process which becomes accessible after authentication.

The process which becomes accessible after authentication includes a memory function, a communication function, an electronic commerce function, and a game function, all of which require access to the data stored in the memory of the recording medium 300 A. The process information is a name of a process that corresponds to one of the above-mentioned functions.

Here, the process information representing a memory function is “memory A” and “memory B”, which represent the names for the memory A 361 A and the memory B 362 A, each memory being a memory area that the storage area 310 A owns. Likewise, the process information representing a game function is “game” which represents the name of the game 363 A.

If “memory A” has been registered as process information, such processes are enabled as writing to and reading from the data files within the area of the memory A 361 A, and registering of a new data file to the area of the memory A 361 A. The same thing as the aforementioned case of “memory A” applies to the case in which “memory B” has been registered. The stated arrangement enables use of a proper memory area when storing information acquired through the communication function according to importance level of the information, and then to set communication number and authentication number to each memory area.

If “game” has been registered, it enables use of program data and data files necessary for the execution of the game 363 A. The game is executed by using these program data and data files.

If “communication function” has been registered, it enables use of program data and data files necessary for the execution of the communication function 364 A. The communication function is executed by using the above-mentioned program data and data files.

If “electronic commerce function” has been registered, it enables use of program data and data files necessary for the execution of the electronic commerce function 365 A. The electronic commerce function is executed by using the above-mentioned program data and data files.

Note here that the same authentication information may be assigned to different pieces of communication information. In the process information table T 352 , for example, an authentication number “ 3 ” is assigned to two different communication numbers 1 and 3 . The process information assigned to the set of the communication number “ 1 ” and the authentication number “ 3 ” is “memory B”; and the process information assigned to the set of the communication number “ 3 ” and the authentication number “ 3 ” is “game”.

(d) The Process-Name Storage Area 315 A

The process-name storage area 315 A is the same as the process-name storage area 315 of the first embodiment, therefore the description thereof is omitted.

(2) The Setting Unit 330 A

The setting unit 330 A is tamper-resistant, and includes therein an authentication-information setting unit 331 A, a process-information setting unit 332 A, and a communication-information setting unit 333 A.

(a) The Authentication-Information Setting Unit 331 A

The authentication-information setting unit 331 A registers authentication information received from an external terminal into the first storage area 311 A, either at the time when the recording medium 300 A is purchased or at the time when usage is commenced.

The authentication-information setting unit 331 A receives, as authentication information, one of character information, fingerprint information, or a combination of character information and fingerprint information from the external terminal via the input/output unit 340 A, then judges whether or not the received authentication information has already been registered. If the authentication information has already been registered, the authentication-information setting unit 331 A acquires the corresponding authentication number, and stores the acquired authentication number temporarily in the setting unit 330 A.

Note here that the method of judging whether or not the received authentication information has been registered is the same as that of the first embodiment, therefore the description thereof is omitted here.

If the authentication information has not been registered yet, the authentication-information setting unit 331 registers the authentication information. The registration of the authentication information performed by the authentication-information setting unit 331 A is the same as that performed by the authentication-information setting unit 331 , therefore the description thereof is omitted here.

(b) The Communication-Information Setting Unit 333 A

The communication-information setting unit 333 A registers communication information received through an external terminal into the third storage area 313 A, either at the time when the recording medium 300 A is purchased or at the time when usage is commenced.

The communication-information setting unit 333 A receives a telephone number from the input/output unit 340 A via the control unit 320 A, judges whether or not the received telephone number has already been registered. If the telephone number has already been registered, the communication-information setting unit 333 A acquires the corresponding communication number, and stores the acquired communication number temporarily in the setting unit 330 A.

If the received telephone number has not yet been registered, the telephone number will be registered as follows. The communication-information setting unit 333 A calculates, with use of the communication information table T 351 , a communication number to be used for the telephone number, and registers the telephone number with the calculated communication number into the communication-information table T 351 of the third storage area 313 A. Note here that the calculated communication number will be temporarily stored in the setting unit 330 A.

(c) The Process-Information Setting Unit 332 A

The process-information setting unit 332 A registers process information received from an external terminal into the second storage area 312 A, either at the time when the recording medium 300 A is purchased or at the time when usage is commenced.

The process-information setting unit 332 A receives process information to be registered into the second storage area 312 A, from the input/output unit 340 A via the control unit 320 A. The process-information setting unit 332 A then registers into the process information table T 352 the received process information together with the communication number and the authentication number that have been temporarily stored in the setting unit 330 A. The process-information setting unit 332 A further makes inaccessible the process for the process name registered as the process information.

Note, in the above, that if process information that has the same communication number and the same authentication number has been already registered, another registration therefore will not be performed.

By the above operations, each set of communication information and authentication information is associated with the corresponding process information.

(3) The Control Unit 320 A

The control unit 320 A is tamper-resistant, and includes an authentication unit 321 A, a process unit 322 A, and a selection unit 323 A.

The control unit 320 A receives authentication-start information and other kinds of information, from the portable telephone 100 A via the input/output unit 340 A. Upon receiving information from the portable telephone 100 A, the control unit 320 A judges whether or not the received information is authentication-start information. If it is judged that the received information is authentication-start information, the control unit 320 A outputs the received authentication-start information to the authentication unit 321 A, and instructs the authentication unit 321 A to start authentication. If the received information is judged to not be the authentication-start information, authentication will not be performed.

(a) The Selection Unit 323 A

The selection unit 323 A, upon receiving an instruction to output list information from the authentication unit 321 A, generates list information composed of the telephone numbers stored in the communication information table T 351 of the third storage area 313 A, then outputs the generated list information to the portable telephone 100 A via the input/output unit 340 A, in order to prompt the user to select the desired communication information.

The selection unit 323 A receives number-to-be used information from the portable telephone 100 A via the input/output unit 340 A, and acquires the communication number that corresponds to the received number-to-be used information. In addition, the selection unit 323 A retains the acquired communication number and the corresponding communication information until the next authentication.

(b) The Authentication Unit 321 A

The authentication unit 321 A, upon receiving authentication-start information from the control unit 320 A, instructs the selection unit 323 A to output list information.

After the communication number has been received by the selection unit 323 A, the authentication unit 321 A outputs the input-means information to the portable telephone 100 A via the input/output unit 340 A.

The authentication unit 321 A receives from the portable telephone 100 A one of first input information, second input information, and third input information. Then according to the received input information, the authentication unit 321 A receives user information from the portable telephone 100 A, as shown in the first embodiment. The authentication unit 321 A then performs authentication using the received user information and the authentication information table T 350 . When it is necessary to output an acquired authentication number to the process unit 322 A, the authentication unit 221 A outputs the acquired authentication number and the communication number acquired at the selection unit 323 A, as a set, to the process unit 322 A.

Note here that the authentication method is the same as that performed by the authentication unit 321 of the first embodiment, therefore a description thereof is omitted.

(c) The Process Unit 322 A

The process unit 322 A receives an authentication number and a communication number from the authentication unit 321 A, and judges whether or not there is a set of a first number and a second number that matches the received set of the authentication number and the communication number.

If such a set of the first number and the second number exists, the following operation will be performed. First, the process unit 322 A judges whether or not process-in-use information is stored in the process-name storage area 315 A. If the process-in-use information is stored, the process unit 322 A reads the process-in-use information from the process-name storage area 315 A, and acquires the process name of the process that has been made accessible. Then the process unit 322 A sets an access right so that the process for the acquired process name is made inaccessible. Next, the process unit 322 A reads, from the process information table T 352 , the process information that corresponds to the set of the first number and the second number that matches the received set of the authentication number and the communication number, and sets access rights so that only the process of the process name registered in the read process information is accessible. Further, the process unit 322 A updates the content of the process-name storage area 315 A, so that the process name registered in the acquired process information will be new process-in-use information.

If no such set of the first number and the second number exists, the process unit 322 A generates combination-impossible information, and outputs the generated combination-impossible information to the portable telephone 100 A via the input/output unit 340 A.

After authentication, the process unit 322 A receives information indicating process execution from the portable telephone 100 A via the input/output unit 340 A, and performs, using the received information, various controls targeted to a communication function, an electronic commerce function, and a memory function. If the communication function is used, the process unit 322 A communicates with the base station using the communication information selected in the selection unit 323 A. Note that in transmitting information to the base station, the process unit 322 A encodes the information in advance, just as conventional portable telephones do. The reception of information from the base station is also performed in the same way as in conventional telephones.

(4) The Input/Output Unit 340 A

The input/output unit 340 A is the same as the input/output unit 340 of the first embodiment, therefore the description thereof is omitted.

2.4 The Operations of the Recording-Medium Unauthorized Use Prevention System 2

In this section, each operation of the recording-medium unauthorized use prevention system 2 is described.

(1) The Setting Operations for Communication Information, Authentication Information, and Process Information

Here, the operations for setting communication information, authentication information, and process information are described with reference to the flowchart of FIG. 15 .

The communication-information setting unit 333 A receives, from the input/output unit 340 A, communication information input through an external device (Step S 100 ), and judges whether or not the received communication information has already been registered (Step S 105 ). If the received communication information has not yet been registered, the communication-information setting unit 333 A calculates a communication number using the communication information table T 351 , registers the calculated communication number together with the received communication information into the communication information table T 351 of the third storage area 313 A, and temporarily stores therein the calculated communication number to be referred to by the process-information setting unit 332 A (Step S 115 ). Next, the authentication-information setting unit 331 A receives, from the input/output unit 340 A, authentication information input through the external device (Step S 120 ), and judges whether or not the received authentication information has already been registered (Step S 125 ). If the received authentication information has not yet been registered, the authentication-information setting unit 331 A calculates an authentication number using the authentication information table T 350 , registers the calculated authentication number together with the received authentication information into the authentication information table T 350 of the first storage area 311 A, and temporarily stores therein the calculated authentication number to be referred to by the process-information setting unit 332 A (Step S 135 ). The process-information setting unit 332 A receives process information (Step S 140 ), then sets the temporarily stored communication number a first number and the temporarily stored authentication number a second number, and judges whether or not the first number and the second number, as a set, have been in use or not (Step S 145 ). If this set of the first number and the second number is not in use, the process-information setting unit 332 A registers the first number, the second number, and the received process information into the process information table T 352 , and sets the process corresponding to the process name of the registered process information inaccessible (Step S 150 ). If this set of first number and second number is in use, the operation ends there.

Note here that the process information registered at Step S 150 may be either process information not yet registered in the process-information table T 352 , or may be already registered process information.

If the received authentication information has already been registered, the authentication-information setting unit 331 A acquires the corresponding authentication number, and temporarily stores therein the acquired authentication number to be referred to by the process-information setting unit 332 A (Step S 130 ), and the operation from Step S 140 will be performed.

If the received communication information has already been registered, the communication-information setting unit 333 A acquires the corresponding communication number, and temporarily stores therein the acquired communication number to be referred to by the process-information setting unit 332 A (Step S 110 ), and the operation from Step S 120 will be performed.

If only communication information should be registered, the received communication information is judged at Step S 105 whether or not it has already been registered, and if the communication information has been registered, the operation ends there. If the communication information has not been registered, Step S 115 will be performed, then the operation ends.

If only authentication information should be registered, Step 120 is performed. Then at Step 125 , the received authentication information is judged whether or not it has already been registered, and if the authentication information has been registered, the operation ends there. If the authentication information has not been registered, Step S 135 will be performed, then the operation ends.

Further, if only process information should be registered, it will be realized by receiving already registered process information, at Step 100 , and receiving already registered authentication information, at step S 120 .

(2) The Authentication Operation

Here, the authentication operation is described with reference to the flowchart of FIG. 16 .

The control unit 320 A receives information from the portable telephone 100 A (Step S 195 ), and judges whether or not the received information is authentication-start information (Step S 198 ). If the authentication-start information is judged not to be authentication-start information, authentication will not be performed. If the authentication-start information is judged to be authentication-start information, the control unit 320 A outputs the authentication-start information to the authentication unit 321 A (Step S 200 ). Upon receiving the authentication-start information, the authentication unit 321 A instructs the selection unit 323 A to output list information (Step S 201 ).

The selection unit 323 A generates the list information with use of each telephone number registered in the communication information table T 351 , and outputs the generated list information to the portable telephone 100 A (Step S 203 ). Next, the selection unit 323 A receives number-to-be used information from the portable telephone 100 A via the input/output unit 340 A, and acquires a communication number for the communication information that corresponds to the received number-to-be used information (Step S 205 ). Note here that until the number-to-be used information is received, the operation is in a state of waiting to receive such number-to-be used information at Step S 205 .

Next, the authentication unit 321 A generates input-means information, and outputs the generated input-means information to the portable telephone 100 A (Step S 206 ). The authentication unit 321 A receives, from the portable telephone 100 A, one of first input information, second input information, and third input information (Step S 207 ), and performs operation for accepting user information (Step S 210 ).

Next, the authentication unit 321 A judges whether or not the authentication information table T 350 has authentication information that matches the received user information (Step S 215 ).

If there is authentication information matching the received user information, the authentication unit 321 A acquires the authentication number of the matching authentication information from the authentication information table T 350 , and outputs the acquired authentication number and the communication number acquired at Step S 205 to the process unit 322 A (Step S 220 ). The process unit 322 A judges whether or not there is process information that corresponds to the acquired set of communication number and authentication number (Step S 240 ). If there is such process information, the access right setting operation is performed (Step S 245 ).

If there is no process information that corresponds to the set of the communication number and the authentication number, the process unit 322 A generates combination-impossible information, and outputs the generated combination-impossible information to the portable telephone 100 A via the input/output unit 340 A (Step S 250 ).

If there is no authentication information that matches the received user information, the authentication unit 321 A generates authentication-impossible information, and outputs the generated authentication-impossible information to the portable telephone 100 A via the input/output unit 340 A (Step S 225 ). Next, the authentication unit 321 A judges, from the authentication information table T 350 , whether or not there is any authentication-unnecessary number (Step S 230 ). If there is such authentication-unnecessary number, the authentication unit 321 A acquires the authentication-unnecessary number (Step S 235 ), and performs the operation from Step S 240 . If there is no authentication-unnecessary number, the operation ends there.

(3) The User Information Reception Operation

The user information reception operation shown in FIG. 16 is the same as the user information reception operation of the first embodiment which is shown in FIG. 8 . Therefore, a description is omitted.

(4) The Access Right Setting Operation

Here, the access right setting operation mentioned in FIG. 16 is detailed with reference to the flowchart of FIG. 17 .

The process unit 322 A judges whether there is process-in-use information (Step S 260 ).

If there is process-in-use information, the process unit 322 A reads the process-in-use information from the process-name storage area 315 A, acquires the process name of the process that has been made accessible, and sets access rights so that the process corresponding to the acquired process name is made inaccessible (Step S 265 ). The process unit 322 A then acquires process information that corresponds to the set of first number and second number, which matches the set of the communication number and the authentication number that has been received from the authentication unit 321 A. The process unit 322 A sets access rights to the process for the process name registered in the acquired process information, so that the process is made accessible (Step S 270 ). The process unit 322 A updates the process-in-use information of the process-name storage area 315 A, using the process name registered in the process information acquired at Step S 270 .

If there is no process-in-use information, the operation from Step S 270 will be performed.

(5) Examples of Authentication Operation

Here, a specific flow of the authentication operation is described with reference to each table shown in FIGS. 12 , 13 , and 14 .

The selection unit 323 A, upon receiving from the portable telephone 100 A communication information of “corporate”, acquires the communication number of “ 1 ”.

The authentication unit 321 A, upon receiving from the portable telephone 100 A, fingerprint information as user information, acquires the authentication number of “ 2 ” from the authentication information table T 350 .

The process unit 322 A acquires the first number “ 1 ” and the second number “ 2 ”, from the communication number “ 1 ” and the authentication number “ 2 ”, and acquires the process information that corresponds to both the acquired first number “ 1 ” and the second number “ 2 ” from the process information table T 352 . In this case, the process information in which “communication function” has been registered is acquired, and the communication function will be made accessible.

If the selection unit 323 A receives communication information of “corporate”, and the authentication unit 321 A receives character information of “PW 2 ” as user information, the communication function and the electronic commerce function are made accessible.

If the selection unit 323 A receives communication information of “corporate”, and the authentication unit 321 A receives character information of “PW 10 ” as user information, a message reporting that there is no authentication information that matches the “PW 10 ” in the authentication information table T 350 is output to the portable telephone 100 A.

Further, the authentication unit 321 A judges whether or not there is any authentication-unnecessary number in the authentication information table T 350 , and acquires the authentication number “ 1 ”. The process unit 322 A acquires the first number “ 1 ” and the second number “ 1 ” from the communication number “ 1 ” and the authentication number “ 1 ”, and acquires the process information that corresponds to both the acquired first number “ 1 ” and the second number “ 1 ”, from the process information table T 352 . In this case, the process information in which “memory B” has been registered is acquired, then memory B is made accessible.

If the selection unit 323 A receives communication information of “private 1 ”, and the authentication unit 321 A receives character information of “PW 2 ”, the process unit 322 A acquires the first number “ 2 ” and the second number “ 3 ”, from the communication number “ 2 ” and the authentication number “ 3 ”, and judges whether or not the process information table T 352 has process information that matches both the acquired first number “ 2 ” and the second number “ 3 ”. In this case, there is no process information that matches both the first number “ 2 ” and the second number “ 3 ”, therefore a message reporting that there is no such process information is output to the portable telephone 100 A.

2.5 Summary of the Second Embodiment

As described above, the recording-medium unauthorized use prevention system 2 has, within the recording medium 300 A, a tamper-resistant authentication unit 321 A. This prevents third parties from decoding and tampering with the authentication structure of the authentication unit. Therefore, it prevents unauthorized third parties from accessing the recording medium 300 A.

In addition, the recording medium 300 A stores thereon one or more pieces of communication information, one or more pieces of authentication information, and further one or more pieces of process information that each correspond to a piece of communication information and to a piece of authentication information. Therefore, the user can use appropriate communication information and user information according to functions the user wants to use. This makes it possible to restrict use of functions stored in the recording medium 300 A, thereby heightening security. Therefore, the recording medium 300 A will have heightened security for the owner.

In addition, while conventional recording media record thereon only one communication information, the recording medium 300 A stores thereon a plurality of pieces of communication information. Therefore, the user of the recording medium 300 A does not have to carry a plurality of recording media, which reduces possibility of unauthorized use thereof, incident to loss or robbery.

For example, there is a system that a user ID card which is called an SIM (subscriber identity module) card is mounted to the main body of a telephone so as to enable communication. This SIM card stores therein individual information of the owner, such as an ID code and telephone number data. By mounting this SIM card to such as a portable telephone of the user, a telephone of others, and a public telephone, it becomes possible to perform various operations with use of the ID code stored in the SIM card, such as calling and billing, and even calling based on the telephone number data stored in the memory is made possible.

However, One SIM card can store therein only one ID code and related information. Therefore, if a person owns a plurality of ID codes, he accordingly has to own the corresponding number of SIM cards. However, the recording medium of the second embodiment is operable to store therein a plurality of pieces of communication information. Therefore, even if a person owns a plurality of ID codes, he has to carry only one recording medium. This reduces possibility of unauthorized use incident to loss or robbery.

3. The Third Embodiment

As the third embodiment according to the present invention, a recording-medium unauthorized use prevention system 3 is described as follows.

3.1 The Structure of a Recording-Medium Unauthorized Use Prevention System 3

The recording-medium unauthorized use prevention system 3 has the same structure as the recording-medium unauthorized use prevention systems 1 and 2 , and is comprised of portable telephones 100 B, 200 B, and a recording medium 300 B to which each portable telephone is mountable.

In this section, the description mainly focuses on the differences with the recording-medium unauthorized use prevention systems 1 and 2 .

The recording-medium unauthorized use prevention system 3 detects the incident when the recording medium 300 B is mounted to the portable telephone 100 B, records information indicating thereof, into the recording medium 300 B, and judges whether or not it is necessary to receive a password by comparing the information recorded this time with the information recorded last time. The password being composed of a combination of one or more numbers and letters, and being used for identifying the owner of the recording medium 300 B. Hereinafter, the password is called “input password.”

When reception of an input password is necessary, the recording-medium unauthorized use prevention system 3 receives the input password, and if the input password matches the password stored in the recording medium 300 B receives communication information and user information, so as to enable restriction of accessible process information, just as in the second embodiment.

Note here that the same operation as in the above will be performed when the power is turned on while the recording medium 300 B is being mounted to the portable telephone 100 B.

The same thing applies to the case when the recording medium 300 B is mounted to the portable telephone 200 B.

3.2 The Structure of the Portable Telephone 100 B

In this section, the description focuses on the difference with the portable telephone 100 or with the portable telephone 100 A.

As shown in FIG. 18 , the portable telephone 100 B is comprised of an output unit 101 B, an input unit 102 B, a radio unit 103 B, a baseband signal process unit 104 B, a speaker 105 B, a microphone 106 B, a fingerprint input unit 107 B, a control unit 108 B, an input/output unit 109 B, a power supply unit 110 B, and a connection unit 115 B.

The portable telephone 100 B is specifically a computer system comprised of a microprocessor, a ROM, a RAM, a display unit, and the like. The ROM stores thereon a computer program. The portable telephone 100 B performs functions by using the microprocessor according to the computer program.

Note here that the portable telephone 200 B has the same structure as the portable telephone 100 B, therefore a description thereof is omitted.

(1) The Output Unit 101 B

The output unit 101 B receives, from the recording medium 300 B, a password input request indicating an input request of an input password, outputs a message prompting the user to input an input password.

Further, if the output unit 101 B receives identification-impossible information indicating that the input password input through the input unit 102 B does not match the password stored in the recording medium 300 B, outputs a message reporting thereof.

Furthermore, the output unit 101 B outputs the same messages as those output from the output unit 101 of the first embodiment, or as those output from the output unit 101 A of the second embodiment.

(2) The Fingerprint Input Unit 107 B

The fingerprint input unit 107 B is the same as the fingerprint input unit 107 of the first embodiment, therefore a description thereof is omitted here.

(3) The Input Unit 102 B

The input unit 102 B is comprised of a touch panel, a keyboard having a ten key input function, and the like, and outputs to the control unit 108 B an input instruction from the user, the input instruction including coordinate information showing the location at the touch panel that has been pushed, and a key operation signal generated by a key input through the keyboard.

In addition, when the output unit 101 B outputs a message prompting the user to input an input password, the input unit 102 B receives the input password, and outputs the received input password to the control unit 108 B.

The input unit 102 B also accepts input of the same kinds of information as those accepted by the input unit 102 of the first embodiment or by the input unit 102 A of the second embodiment, and outputs the pieces of accepted information to the control unit 108 B.

(4) The Radio Unit 103 B

The radio unit 103 B is the same as the radio unit 103 of the first embodiment, therefore a description thereof is omitted.

(5) The Baseband Signal Process Unit 104 B

The baseband signal process unit 104 B is the same as the baseband signal process unit 104 of the first embodiment, therefore a description thereof is omitted.

(6) The Speaker 105 B

The speaker 105 B is the same as the speaker 105 of the first embodiment, therefore a description thereof is omitted.

(7) The Microphone 106 B

The microphone 106 B is the same as the microphone 106 of the first embodiment, therefore a description thereof is omitted.

(8) The Control Unit 108 B

The control unit 108 B controls the portable telephone 100 B as a whole.

The control unit 108 B, upon receiving a password input request from the recording medium 300 B via the input/output unit 109 B, outputs the received password input request to the output unit 101 B.

The control unit 108 B receives from the input unit 102 B either number-to-be used information or an input password, outputs the number-to-be used information or the input password to the recording medium 300 B.

The control unit 108 B, upon receiving an identification-impossible information from the recording medium 300 B via the input/output unit 109 B, outputs the received identification-impossible information to the output unit 101 B.

The control unit 108 B also receives, from the recording medium 300 B, the same types of information as the control unit 108 of the first embodiment, and as the control unit 108 A of the second embodiment, and outputs the above-mentioned pieces of received information to the output unit 101 B. Further, the control unit 108 B receives, from the input unit 102 B, the same types of information as the control unit 108 of the first embodiment, or as the control unit 108 A of the second embodiment, and outputs the pieces of received information to the recording medium 300 B.

In addition, the control unit 108 B has a calendar function and a clock function, and upon receiving information for inquiring about the current date and time from the recording medium 300 B, acquires the current date and time with use of the calendar function and the clock function, and outputs the acquired date and time to the recording medium 300 B. Furthermore, the control unit 108 B has a GPS (global positioning system) function, and upon receiving information for inquiring about the current position from the recording medium 300 B, acquires the current position information by communicating with the GPS satellites via the radio unit 103 B, and outputs the acquired current position information to the recording medium 300 B.

Here, the date and time to be output to the recording medium 300 B is date, hour, and minute, and the position information to be output to the recording medium 300 B is in a unit of municipalities.

In addition, the control unit 108 B includes a memory just as the control unit 108 of the first embodiment does.

(9) The Input/Output Unit 109 B

The input/output unit 109 B is the same as the input/output unit 109 of the first embodiment, therefore a description thereof is omitted.

(10) The Power Supply Unit 110 B

The power supply unit 110 B is the same as the power supply unit 110 of the first embodiment, therefore a description thereof is omitted.

(11) The Connection Unit 115 B

The connection unit 115 B has therein a pullup resistor 130 B and a ground 131 B, as shown in FIG. 19 .

One end of the pullup resistor 130 B is connected to the power supply unit 110 B, and the other end thereof is connected to a detection unit of the recording medium 300 B, which will be detailed later. In addition, the ground 131 B is connected to the power supply unit 110 B and to the detection unit of the recording medium 300 B.

By the above arrangement, when the recording medium 300 B is mounted to the portable telephone 100 B, the portable telephone 100 B is able to send, with use of the power voltage of the power supply unit 110 B, to the detection unit of the recording medium 300 B, a mounting-detect signal indicating that the recording medium 300 B has been mounted to the portable telephone 100 B. While the recording medium 300 B is being mounted, the portable telephone 100 B continues to output the mounting-detect signal to the detection unit of the recording medium 300 B.

3.3 The Structure of the Recording Medium 300 B

In this section, the structure of the recording medium 300 B is described.

As shown in FIG. 20 , the recording medium 300 B is comprised of a storage area 310 B, a control unit 320 B, a setting unit 330 B, an input/output unit 340 B, and a judgment unit 350 B.

The recording medium 300 B is specifically a computer system which is comprised of a microprocessor, a ROM, a RAM, and the like. The ROM stores thereon a computer program. The recording medium 300 B performs functions by using the microprocessor according to the computer program.

(1) The Storage Area 310 B

The storage area 310 B includes a first storage area 311 B, a second storage area 312 B, a third storage area 313 B, a password storage area 314 B, and a process-name storage area 315 B. The storage area 310 B further includes a memory A 361 B, a memory B 362 B, a game 363 B, a communication function 364 B, and an electronic commerce function 365 B, just as the storage area 310 A of the second embodiment. Note here that the memory A 361 B, the memory B 362 B, the game 363 B, the communication function 364 B, and the electronic commerce function 365 B have been stored in the recording medium 300 B before purchase.

(a) The First Storage Area 311 B

The first storage area 311 B is the same as the first storage area 311 A of the second embodiment, therefore a description thereof is omitted here.

(b) The Second Storage Area 312 B

The second storage area 312 B is the same as the second storage area 312 A of the second embodiment, therefore a description thereof is omitted here.

(c) The Third Storage Area 313 B

The third storage area 313 B is the same as the third storage area 313 A of the second embodiment, therefore a description thereof is omitted.

(d) The Password Storage Area 314 B

The password storage area 314 B stores thereon the password which identifies the owner of the recording medium 300 B, that is used in judging whether or not a user matches the owner of the recording medium 300 B.

Note that herein after, the password stored in the password storage area 314 B is called “registration password.”

(e) The Process-Name Storage Area 315 B

The process-name storage area 315 B is the same as the process-name storage area 315 of the first embodiment, and as the process-name storage area 315 A of the second embodiment, therefore a description thereof is omitted.

(2) The Judgment Unit 350 B

The judgment unit 350 B includes therein a detection unit 351 B, a controller 352 B, and a history information recording unit 353 B.

(a) The Detection Unit 351 B

When the recording medium 300 B is mounted to the portable telephone 100 B, the detection unit 351 B is connected to the connection unit 115 B included in the portable telephone 100 B, receives a mounting-detect signal from the connection unit 115 B, and outputs the received mounting-detect signal to the history information recording unit 353 B via the controller 352 B.

While the recording medium 300 B is being mounted to the portable telephone 100 B, the detection unit 351 B continues to output the mounting-detect signal to the history information recording unit 353 B via the controller 352 B.

(b) The Controller 352 B

The controller 352 B receives the mounting-detect signal from the detection unit 351 B, and outputs the received mounting-detect signal to the history information recording unit 353 B. The controller 352 B also outputs information received from the history information recording unit 353 B to the input/output unit 340 B, and further performs an input/output of information with the portable telephone 100 B via the input/output unit 119 B of the portable telephone 100 B.

(c) The History Information Recording Unit 353 B

The history information recording unit 353 B has a history information storage area 354 B for storing therein history information. The history information storage area 354 B includes a history information table T 400 as illustrated in FIG. 21 . Here, the history information is composed of: category information showing that the recording medium 300 B is mounted to the portable telephone 100 B; date/time information showing the date and time in which the recording medium 300 B is mounted to the portable telephone 100 B; and position information showing the position at which the recording medium 300 B is mounted to the portable telephone 100 B.

The history information table T 400 stores therein at least one set of such history information showing category, date/time, and position.

“Category” in this figure represents category information indicating that the recording medium 300 B is mounted to the portable telephone 100 B; “date/time” in this figure represents date/time information indicating the date and time of the mounting; and “position” therein represents position information indicating the position of the mounting and is registered in a unit of municipalities.

When the recording medium 300 B is mounted, the history information recording unit 353 B receives a mounting-detect signal from the controller 352 B. Upon receiving the mounting-detect signal, the history information recording unit 353 B outputs, to the portable telephone 100 B, information for inquiring about the current date/time and the current position, receives from the portable telephone 100 B information relating to the current date/time and information on the current position, generates history information for the use of each piece of the received information, and registers the generated history information into the history information table T 400 . After the registration of the history information, the history information recording unit 353 B outputs authentication-instruction information for instructing an authentication-start to the authentication unit 321 B.

(3) The Setting Unit 330 B

The setting unit 330 B is tamper-resistant, and includes therein an authentication-information setting unit 331 B, a process-information setting unit 332 B, and a communication-information setting unit 333 B.

(a) The Authentication-Information Setting Unit 331 B

The authentication-information setting unit 331 B registers authentication information into the first storage area 331 B, and a registration password into the password storage area 314 B.

The registration of the registration password is performed as follows. That is, the authentication-information setting unit 331 B receives, from the input/output unit 340 B via the control unit 320 B information composed of the registration password and information for instructing registration of the registration password, and registers the registration password into the password storage area 314 B with use of the received information. Note that the registration password can be changed even after registration.

The registration of authentication information is the same as those of the first embodiment and the second embodiment, therefore a description thereof is omitted.

Note that the setting of the registration password is performed from an external terminal or from the portable telephone 100 B, and the registration of the authentication information is performed from an external terminal.

(b) The Communication-Information Setting Unit 333 B

The communication-information setting unit 333 B registers communication information received from the input/output unit 340 B via the control unit 320 B, and registers the communication information.

The registration of the communication information is the same as that performed by the communication-information setting unit 333 A shown in the second embodiment, therefore a description thereof is omitted.

(c) The Process-Information Setting Unit 332 B

The process-information setting unit 332 B receives process information from the input/output unit 340 B via the control unit 320 B, and registers the process information.

The registration of the process information is the same as that performed by the process-information setting unit 332 A shown in the second embodiment, therefore a description thereof is omitted.

(4) The Control Unit 320 B

The control unit 320 B is tamper-resistant, and includes an authentication unit 321 B, a process unit 322 B, and a selection unit 323 B.

The control unit 320 B receives authentication-start information and other types of information, from the portable telephone 100 B via the input/output unit 340 B. Upon receiving information from the portable telephone 100 B, the control unit 320 B judges whether or not the received information is authentication-start information. If it is judged that it is authentication-start information, the control unit 320 B outputs the received authentication-start information to the authentication unit 321 B and instructs the authentication unit 321 B to start authentication. If the received information is judged to not be authentication-start information, authentication will not be performed.

(a) The Authentication Unit 321 B

Here, the authentication unit 321 B is described.

(i) The Authentication while the Recording Medium 300 B is Being Mounted

The authentication unit 321 B, upon receiving authentication-instruction information from the history information recording unit 353 B, reads first history information, which is the latest history information, and second history information, which is the history information from the last time, then calculates the difference in date/time there between, with use of the date/time item of the first history information and the date/time item of the second history information. Then, the authentication unit 321 B judges whether or not the calculated difference in date/time exceeds the predetermined time interval stored in the authentication unit 321 B. In this example, the predetermined time interval stored in the authentication unit 321 B is 30 minutes, and is set at the time of purchase of the recording medium 300 B from an external terminal.

If the difference in date/time is judged to exceed the predetermined time interval, the authentication unit 321 B outputs a password input request to the portable telephone 100 B via the input/output unit 340 B.

If the difference in date/time is judged not to exceed the predetermined time interval, the authentication unit 321 B judges whether or not the position of mounting differs between the first history information and the second history information. If the positions of mounting are judged to be identical, the authentication unit 321 B outputs, to the process unit 322 B, authentication-unnecessary information for instructing to not perform authentication. On the contrary, if the positions of mounting are judged to differ, the authentication unit 321 B outputs a password input request to the portable telephone 100 B via the input/output unit 340 B.

When receiving the input password from the portable telephone 100 B, the authentication unit 321 B judges whether or not the received input password matches the registration password stored in the password storage area 314 B. If the received input password is judged to match, the authentication unit 321 B instructs the selection unit 323 B to output list information.

If the received input password is judged not to match, the authentication unit 321 B outputs a message reporting that the input password is not correct to the portable telephone 100 B via the input/output unit 340 B.

Note that the operation of instructing the selection unit 323 B to output list information is the same as that performed by the authentication unit 321 A of the second embodiment, therefore a description thereof is omitted.

(ii) The Authentication According to a User Instruction

The authentication unit 321 B receives authentication-start information from the control unit 320 B. Upon receiving the authentication-start information, the authentication unit 321 B outputs a password input request to the portable telephone 100 B via the input/output unit 340 B. Upon receiving an input password from the portable telephone 100 B, the authentication unit 321 B judges whether or not the received input password matches the registration password that has been registered in the password storage area 314 B. If they are judged to match each other, the authentication unit 321 B instructs the selection unit 323 B to output list information.

If the passwords are judged to not match each other, the authentication unit 321 B outputs, to the portable telephone 100 B via the input/output unit 340 B, a message reporting that the input password is not correct.

Note that the operation instructing the selection unit 323 B to output list information is the same as that performed by the authentication unit 321 A of the second embodiment, therefore a description thereof is omitted.

(b) The Process Unit 322 B

The process unit 322 B receives either authentication-unnecessary information from the authentication unit 321 B, or an authentication number and a communication number from the authentication unit 321 B.

When receiving authentication-unnecessary information from the authentication unit 321 B, the process unit 322 B judges whether or not process-in-use information has been stored in the process-name storage area 315 B. If process-in-use information has been stored, it will be read from the process-name storage area 315 B, and the process name is acquired from the read process-in-use information. Then, the access right is given to the process corresponding to the process whose process name has been acquired, so as to enable execution of the process.

When receiving an authentication number and a communication number from the authentication unit 321 B, the process unit 322 B performs the same operation as the process unit 322 A of the second embodiment, therefore a description thereof is omitted.

(c) The Selection Unit 323 B

The selection unit 323 B, upon receiving, from the authentication unit 321 B, an information instruction to output list information, requests the portable telephone 100 B to input number-to-be used information, and accepts the number-to-be used information corresponding to the number that the user wants to use.

Note that the acceptance of the number-to-be used information is the same as that performed by the second embodiment, therefore a description thereof is omitted.

(5) The Input/Output Unit 340 B

The input/output unit 340 B receives, from the controller 352 B of the judgment unit 350 B, information of either the portable telephone 100 B or an external terminal, and outputs the received information either to the control unit 320 B, or to the setting unit 320 B via the control unit 320 B, according to the content of the received information.

The input/output unit 340 B also outputs information received from the control unit 320 B, to the portable telephone 100 B via the controller 352 B of the judgment unit 350 B.

3.4 The Operations of the Recording-Medium Unauthorized Use Prevention System 3

In this section, each operation of the recording-medium unauthorized use prevention system 3 is described. Note that the operations for setting authentication information, communication information, and process information are the same as those of the second embodiment, therefore a description thereof is omitted.

(1) The Registering Operation of History Information

Here, the operation for registering history information is described with reference to the flowchart shown in FIG. 22 .

The detection unit 351 B receives a mounting-detect signal from the connection unit 115 B of the portable telephone 100 B, by being connected to the connection unit 115 B, and outputs the received mounting-detect signal to the controller 352 B (Step S 300 ).

The controller 352 B, upon receiving the mounting-detect signal, outputs the received mounting-detect signal to the history information recording unit 353 B (Step S 305 ).

The history information recording unit 353 B, upon receiving the mounting-detect signal, outputs, to the portable telephone 100 B, information inquiring about the current date/time and the current position, then receives, from the portable telephone 100 B, information relating to the current date/time and the current position (Step S 308 ). The history information recording unit 353 B generates history information with use of each piece of the received information, and registers the generated history information into the history information table T 400 , and instructs the authentication unit 321 B to start authentication (Step S 310 ).

(2) The Authentication Operation

Here, the authentication operation is described with reference to the flowcharts shown in FIGS. 23 and 24 .

Upon receiving an instruction to start authentication from the history information recording unit 353 B, the authentication unit 321 B acquires first history information and second history information from the history information table T 400 (Step S 400 ), and judges whether or not the difference between the date/time of mounting the last (i.e., previous) time and the date/time of mounting this (i.e., present) time is within a predetermined time period, with use of date/time items in the acquired pieces of information (Step S 405 ).

If the difference is judged to be within the predetermined time period, the authentication unit 321 B judges whether or not the position of mounting the last time and the position of mounting this time differ from each other, with use of the position items in the acquired pieces of information (Step S 410 ).

If the positions are judged to be the same, the authentication unit 321 B outputs authentication-unnecessary information to the process unit 322 B, and an access right setting operation is performed at the process unit 322 B (Step S 475 ).

If the positions are judged to differ, the authentication unit 321 B outputs a password input request to the portable telephone 100 B, receives an input password from the portable telephone 100 B (Step S 415 ), and judges whether or not the received input password matches the registration password (Step S 420 ).

If the mentioned passwords are judged to not match each other, the authentication unit 321 B generates identification-impossible information, outputs the generated identification-impossible information to the portable telephone 100 B, and ends the operation (Step S 425 ).

If the mentioned passwords are judged to match each other, the selection unit 323 B generates list information with use of each telephone number stored in the third storage area 313 B, and outputs the generated list information to the portable telephone 100 B (Step S 430 ). Next, the number-to-be used information inputted from the portable telephone 100 B is received through the input/output unit 340 B, and the communication number of the communication information that corresponds to the received number-to-be used information is acquired (Step S 435 ). Note that until the number-to-be used information is received, the operation is in a wait state for receiving number-to-be used information, at Step S 435 .

Next, the authentication unit 321 B generates input-means information, and outputs the generated input-means information to the portable telephone 100 B (Step S 436 ). The authentication unit 321 B then receives, from the portable telephone 100 B, one of first input information, second input information, or third input information (Step S 437 ), and performs user information reception operation (Step S 440 ).

Next, the authentication unit 321 B judges whether or not there is, within the first storage area 311 B, authentication information that matches the received user information (Step S 445 ).

If there is authentication information matching the received user information, the authentication unit 321 B acquires the authentication number of the matching authentication information from the first storage area 311 B, and outputs, to the process unit 322 B, the acquired authentication number together with the communication number that has been acquired at Step S 435 (Step S 450 ). The process unit 322 B judges whether or not there is process information that corresponds to the received set of the communication number and the authentication number (Step S 470 ). If there is such process information, an access right setting operation is performed (Step S 475 ) If there is no such process information that corresponds to the set of the communication number acquired at the selection unit 323 B and the authentication number acquired at the authentication unit 321 B, the process unit 322 B generates combination-impossible information, and outputs the generated combination-impossible information to the portable telephone 100 B via the input/output unit 340 B (Step S 480 ).

If there is no authentication information that matches the received user information, the authentication unit 321 B generates authentication-impossible information, and outputs the generated authentication-impossible information to the portable telephone 100 B via the input/output unit 340 B (Step S 455 ). Then judgment is performed whether any authentication-unnecessary number exists (Step S 460 ). If no such authentication-unnecessary number exists, the operation ends. If such an authentication-unnecessary number exists, it is acquired (Step S 465 ), and the operation from Step S 470 is performed.

If, at Step S 405 , the difference is judged not to be within the predetermined time period, the operation from Step 415 is performed.

Note that the authentication according to user instruction is performed as follows.

That is, the control unit 320 B receives information from the portable telephone 100 B, and judges whether or not the received information is authentication-start information. If it is judged that the received information is authentication-start information, the control unit 320 B outputs the received authentication-start information to the authentication unit 321 B. After receipt of the authentication-start information, the operation from Step S 415 shown in FIG. 23 is performed, so as to realize the authentication.

If the information received at the control unit 320 B is judged not to be authentication-start information, authentication will not be performed.

(3) The User Information Reception Operation

The user information reception operation shown in FIG. 23 is the same as the user information reception operation of the first embodiment which is shown in FIG. 8 . Therefore, a description thereof is omitted.

(4) The Access Right Setting Operation

Here, the access right setting operation mentioned in FIG. 24 is detailed with reference to the flowchart of FIG. 25 .

The process unit 322 B judges whether or not authentication-unnecessary information is received from the authentication unit 321 B (Step S 500 ).

If the authentication-unnecessary information is not received, the process unit 322 B further judges whether or not there is process-in-use information (Step S 505 ). If there is process-in-use information, the process unit 322 B reads the process-in-use information and acquires the process name of the process having been made accessible, and sets access rights so that the process corresponding to the acquired process name is made inaccessible (Step S 510 ). Further, the process unit 322 B acquires, from the second storage area 312 B, process information corresponding to the set of the first number and the second number that matches the set of communication number and the authentication number that has been received from the authentication unit 321 B, sets the access rights to the process corresponding to the process name registered in the acquired process information, so that the process is made accessible (Step S 515 ). The process unit 322 B updates the process-in-use information in the process-name storage area 315 B, with use of the process name registered in the process information acquired at Step S 515 (Step S 520 ). If there is no process-in-use information, the operation from Step S 270 is performed.

If the process unit 322 B judges that it has received authentication-unnecessary information, it further judges whether or not there is process-in-use information (Step S 525 ). If there is process-in-use information, the process unit 322 B reads process-in-use information from the process-name storage area 315 B, acquires the process name of the process that has been made accessible, and sets access right to the process for the acquired process name, so that the process is made accessible (Step S 530 ). If there is no process-in-use information, the operation ends.

(5) Examples of Authentication Operation

Here, a specific flow of authentication operation up to Step S 420 is described with use of the history information table T 400 shown in FIG. 21 . Note that the flow from Step S 430 is the same as the corresponding authentication operation flow of the second embodiment, therefore a description thereof is omitted.

A case is taken as an example in which history information 402 has been registered as latest information.

The authentication unit 321 B, upon receiving authentication-instruction information, acquires the history information 402 as first history information, and history information 401 as second history information. Then, the authentication unit 321 B judges whether or not the latest mounting was performed within a predetermined time period, with use of date/time items in the acquired pieces of history information. Since the difference is 50 minutes in this case, the authentication unit 321 B accepts an input password, and judges the correctness of the accepted input password.

Next, a case is detailed in which history information 403 has been registered as latest information.

The authentication unit 321 B, upon receiving authentication-instruction information from the history information storage area 353 B via the input/output unit 340 B, acquires the history information 403 as first history information, and the history information 402 as second history information. Then, the authentication unit 321 B judges whether or not the latest mounting was performed within a predetermined time period, with use of date/time items in the acquired pieces of history information. Since the difference is 20 minutes in this case, the authentication unit 321 B judges whether or not the mounting for both times was performed at the same position. Since the positions of mounting are different in this case, the authentication unit 321 B accepts an input password, and judges the correctness of the accepted input password.

Next, a case is detailed in which history information 404 has been registered as the latest information.

The authentication unit 321 B, upon receiving authentication-instruction information from the history information storage area 353 B via the input/output unit 340 B, acquires the history information 404 as first history information, and the history information 403 as second history information. Then, the authentication unit 321 B judges whether or not the latest mounting was performed within a predetermined time period, with use of date/time items in the acquired pieces of history information. Since the difference is 5 minutes in this case, the authentication unit 321 B judges whether or not the mounting for both times was performed at the same position. Since the positions of mounting are the same in this case, the authentication unit 321 B does not accept an input password. Further, the process unit 322 B sets access rights and the like with use of the process information having been acquired the last time and retained thereafter, so that the process is made accessible.

3.5 Summary of the Third Embodiment

As described above, the recording-medium unauthorized use prevention system 3 has, within the recording medium 300 B, an authentication unit 321 B that is tamper-resistant. This makes it difficult for third parties to encode or tamper the authentication system of the authentication unit. Therefore, it prevents unauthorized third parties from accessing the recording medium 300 B.

In addition, the recording medium 300 B detects mounting of itself to the portable telephone 100 B, and once it is removed from the portable telephone 100 B, the recording medium 300 B requires the user to input the input password and the user information, if it is re-mounted after a predetermined time has passed, or if the position of mounting differs from last time. According to this, even when a third party has removed the recording medium 300 B from the portable telephone 100 B, this person has to input the input password and the user information, if the recording medium 300 B is re-mounted after a predetermined time has passed, or if the position of mounting differs from the last time. This makes the recording medium 300 B more difficult to be subject to unauthorized use, than conventionally.

4. Other Modification Examples

As described above, the recording medium includes therein an authentication unit that is tamper-resistant. This makes it difficult for third parties to encode or tamper the authentication system of the authentication unit. Accordingly, the recording medium is more effective in preventing third parties from using the recording medium, than conventional recording media.

In addition, the recording medium stores thereon one or more pieces of authentication information, and further one or more pieces of process information that each correspond to a piece of authentication information. Therefore, the user can use appropriate user information according to functions the user wants to use. This makes it possible to restrict use of functions stored in this recording medium. Accordingly, this recording medium is more effective in preventing an unauthorized use thereof by third parties, than conventional recording media.

In addition, the recording medium stores thereon one or more pieces of communication information, and further one or more pieces of process information that each correspond to both a piece of communication information and a piece of authentication information. Therefore, the user can use appropriate user information according to functions the user wants to use. This makes it possible to restrict use of the functions stored in this recording medium. Accordingly, this recording medium is more effective in preventing unauthorized use thereof by third parties, than conventional recording media. In addition, since the recording medium is operable to store thereon a plurality of pieces of communication information, the user does not have to carry a plurality of recording media, unlike conventional SIM cards. This reduces possibility of unauthorized use incident to loss or robbery.

In addition, the recording medium can detect mounting of itself to the portable telephone, and once it is removed from the portable telephone, the recording medium requires the user to input the input password and the user information, if it is re-mounted after a predetermined time has passed, or if the position of mounting differs from the last time. According to this, even when a third party has removed the recording medium from the portable telephone, this person has to input the input password and the user information if the recording medium is re-mounted after a predetermined time has passed or if the position of mounting differs from the last time. This makes the recording medium more difficult to be subject to unauthorized use, than conventionally.

So far, the present invention has been described based on the aforementioned embodiments. However, needless to say, the present invention is not limited to the aforementioned embodiments, and includes the following examples.

(1) In the aforementioned description, the recording-medium unauthorized use prevention system has a portable telephone to which a recording medium is mountable. However, the present invention is not limited to such structure, and may have any kind as long as it is a terminal device to which a recording medium is mountable. Such terminal devices include a PDA (personal digital assistant), a personal computer, a car navigation system, a facsimile machine, and a digital camera.

(2) In the aforementioned description, user information is received from the portable telephone. However, the present invention is not limited to such a structure, and may be a structure in which a recording medium is equipped with a fingerprint input unit, from which fingerprint information is received.

(3) In the present invention, the authentication information may be one of character information, biological information that represents biological characteristics of the user, and a combination of character information and biological information. Accordingly, the user information may also be one of character information, biological information that represents biological characteristics of the user, and a combination of character information and biological information. Furthermore, in the third embodiment, input password and the registration password may also be one of character information, biological information that represents biological characteristics of the user, and a combination of character information and biological information.

Here, the biological information is, for example, fingerprint information, voice print information that represents characteristics of voice print of the user, iris information that represents characteristics of iris of the user, face-outline information that represents characteristics of face-outline of the user, DNA information that represents characteristics of DNA of the user, and a combination of any of the aforementioned information.

To accept voice print information, the portable telephone has to have a voice print input unit that receives voice of the user and generates voice print information of the user, using the received voice. To accept iris information, the portable telephone has to have an iris input unit that reads (scans) the iris of the user and generates iris information of the user, using the read (scanned) iris. Likewise, to accept face-outline information, the portable telephone has to have a face-outline input unit that reads (scans) the face-outline of the user and generates face-outline information of the user, using the read (scanned) face-outline. To accept DNA information, the portable telephone has to have a DNA-information input unit that accepts DNA information resulting from analyzing the DNA of the user. Here, the DNA information is analytical information of hair, blood, or saliva of the user.

Note here that matching of authentication information with the voice print information received at the recording medium happens when at least 80% of the received voice print information matches authentication information. The same restriction applies to matching of authentication information with the iris information, matching of authentication information with the face-outline information, matching of authentication information with the DNA information. The reference value 80% may be another value. Matching of authentication information with a combination of any of the aforementioned information happens when all the information included in the authentication information matches all the information included in the combination of information.

(4) In the present invention, user information may be encrypted before being output from the portable telephone to the recording medium.

An example operation performed in this case is shown as follows.

A common key is owned by the portable telephone and the recording medium. The portable telephone encrypts the input user information using the common key, and outputs the encrypted user information to the recording medium, and the recording medium decrypts the encrypted user information using the common key, to obtain the user information input from the portable telephone.

(5) In the aforementioned description, the first storage area is set in the recording medium. However, the present invention is not limited to this structure, and the first storage area may be set in the portable telephone.

Furthermore, the second storage area set in the recording medium may be set in the portable telephone.

Likewise, the third storage area set in the recording medium may be set in the portable telephone.

Likewise, the password storage area set in the recording medium may be set in the portable telephone.

Likewise, the process unit set in the recording medium may be set in the portable telephone.

(6) In the aforementioned description, registration performed at the setting unit is operated through an external device. However, the present invention is not limited to such structure, and another structure is also possible in which registration is performed through a network such as the Internet to which the portable telephone is connected.

(7) In the aforementioned description, the setting unit is used to register each piece of information to the storage area. However, the present invention is not limited to such a structure, and another structure is also possible in which the setting unit performs modification and deletion of already registered information, not only registration.

The following describes how modification and deletion are performed to the authentication information and the process information of the first embodiment. In modifying authentication information, the recording medium receives, from an external terminal, the authentication number that corresponds to the authentication information to be modified, together with the authentication information after modified, and updates the authentication information table with use of the received pieces of information. In deleting authentication information, the recording medium receives, from an external terminal, the authentication number to be deleted, deletes the authentication information using the received authentication number, and further deletes the process information that corresponds to the deleted authentication information. In modifying process information, the recording medium receives, from an external terminal, the process number that corresponds to the process information to be modified, together with the process information after the modification, and updates the process information table with use of the received pieces of information. In deleting process information, the recording medium receives, from an external terminal, the process number to be deleted, and deletes the process information using the received process number, and further deletes the authentication information that corresponds to the deleted process information.

Next, the following describes how modification and deletion are performed on the authentication information, the communication information, and the process information, of the second and third embodiments.

In modifying authentication information, the recording medium receives, from an external terminal, the authentication number that corresponds to the authentication information to be modified, together with the authentication information after the modification, and updates the authentication information table with use of the received pieces of information. In deleting authentication information, the recording medium receives, from an external terminal, the authentication number to be deleted, deletes the authentication information using the received authentication number, and further deletes the process information that corresponds to the deleted authentication information.

In modifying communication information, the recording medium receives, from an external terminal, the communication number that corresponds to the communication information to be modified, together with the communication information after the modification, and updates the communication information table with the received pieces of information. In deleting communication information, the recording medium receives, from an external terminal, the communication number to be deleted, and deletes the communication information using the received communication number, and further deletes the process information that corresponds to the deleted communication information.

In modifying process information, the recording medium receives, from an external terminal, a set of first number and second number that corresponds to the process information to be modified, together with the process information after the modification, and updates the process information table with use of the received pieces of information. In deleting process information, the recording medium receives from an external terminal the set of the first number and the second number to be deleted, and deletes the process information using the received set of the first number and the second number.

(8) In the aforementioned description, the process name of process information to be registered in the second storage area is the process name owned by the recording medium. However, the present invention is not limited to such, and the process name of process information to be registered in the second storage area may be the process name owned by the portable telephone.

(9) In the aforementioned description, the recording-medium unauthorized use prevention system comprises a portable telephone and a recording medium. However, the present invention is not limited to such structure, and the system may include only a portable telephone. In this case, each process that corresponds to the process information to be registered in the second storage area may be set in a recording medium located inside the portable telephone, or may be set in a recording medium that can be mounted to the portable telephone, or may be set in both of them.

In this case, one example of the timing when the judgment should be performed as to whether or not to receive an input password is as follows. That is, the portable telephone detects every time the power supply starts the portable telephone, and stores the detected timing as history information. The judgment whether or not to receive an input password is performed with use of this history information. Alternatively, the password may be received every time the starting of the power supply is detected.

(10) The operation for setting authentication information and process information, which is shown in the first embodiment, is not limited to the flowchart of FIG. 6 . An other structure is also possible in which process information is set first, and then authentication information is set afterward.

An example of operation for this case is described as follows. The recording medium receives, from an external terminal, process information to be registered, then calculates a process number, and with use of the calculated process number, sets the received process information. Next, the recording medium receives from an external terminal, authentication information to be registered, and judges whether or not the received authentication information has already been registered. If the received authentication information has not yet been registered, the process number calculated in the setting of the process information is used as an authentication number, and the recording medium performs authentication information setting this authentication number and the received authentication information. If the received authentication information has already been registered, different authentication information is received and a setting operation is performed.

(11) In the second embodiment, a telephone number is stored as communication information. However, the present invention is not limited to such. An other structure is possible in which a telephone number is encrypted using a function, and the encrypted information is stored. In performing communication, the encrypted information is transmitted to the base station. An example of encryption method is stream cipher.

According to the structure in which a telephone number is stored after being encrypted using a function, any third party is prevented from easily knowing the telephone number, even if this person has acquired the communication information stored in the third storage area 313 A. This prevents unauthorized use by third parties.

Here, the function used in encryption of a telephone number may be stored in the recording medium, or may be retained by an agent who provides the portable telephone with communication functions through the communication information.

Alternatively, in advance, the owner of the communication information may convert a telephone number into information that only he can know. In this case, too, unauthorized use by third parties is prevented.

In this case, list information may be generated with use of the communication information stored in the communication information table, as it is. Or the encrypted information may be decrypted first, then list information is generated with use of the decrypted information.

Alternatively, the communication information table may be provided with an item for registering therein such encrypted information in correspondence with a telephone number. In this structure, a registered telephone number is used for generating list information, and encrypted information corresponding to the selected telephone number is used in communication.

Alternatively, it is possible to register encrypted information in the communication information item of the communication information table, and to have a new table in which encrypted information is stored in correspondence with information before encryption, and to use this new table for the generation of list information.

(12) Registration into each storage area described in the second embodiment is not limited to the order shown in FIG. 15 , and may be in any order.

(13) In the second embodiment, a plurality of pieces of communication information are stored in the communication information table. However, the communication information table may have only one piece of communication information.

In this case, the process information is stored in the second storage area, after being associated with both of the communication information and the authentication information that has been registered in the second storage area. When user information is input in authentication, authentication information that corresponds to the input user information is recognized, and process information corresponding to both the authentication information and the communication information is acquired, and the process for the process name registered in the acquired process information is made accessible.

At this time, the selection unit may be eliminated from the structure, and the process unit may always read communication information from the third storage area.

(14) In the second embodiment, “N.A.” as communication information which indicates that no communication information is necessary may be registered in the communication information table. In this case, process information is registered in association with the set of the communication information “N. A.” and the corresponding authentication information. Note here that in setting process information, the process information setting unit has to control a disable setting of a communication function to the set of the communication information “N.A.” and the corresponding authentication information.

(15) In the third embodiment, judgment as to whether or not an input password should be received is affirmative, either when the difference in date/time is no smaller than a predetermined value, or when the difference in position is no smaller than a predetermined value. However, the present invention is not limited to such. The judgment may be affirmative when the difference in date/time is no smaller than a predetermined value, and the difference in position is no smaller than a predetermined value.

In addition, judgment as to whether or not an input password should be received is based on both date/time information and position information. However, the present invention is not limited to such. Only one of date/time information or position information may be used in the judgment. Alternatively, it is also possible to structure so as to request an input password every time the mounting of the recording medium to the portable telephone is detected. In this case, the authentication unit may request the portable telephone to input the input password, upon receiving from the history information recording unit an instruction to start authentication.

Alternatively, the input password reception may be omitted. In this case, when the mounting of the recording medium to the portable telephone is detected, judgment as to whether or not authentication is required may be performed using the first history information and the second history information, and if the judgment is affirmative, communication information to be used and user information are accepted, and authentication is performed. Alternatively, it is also possible to structure so that communication information to be used and user information are accepted, every time the mounting of the recording medium to the portable telephone is detected. Here, if authentication should be performed according to a user instruction, it is only required that the recording medium request the portable telephone to input communication information and authentication information, upon receiving authentication-start information from the portable telephone.

(16) In the authentication in the third embodiment, the operation is not limited to what is shown in the flowchart of FIGS. 23 and 24 . For example, if the recording medium is mounted to the portable telephone within the predetermined time period, and that at the same position, the operation from Step S 430 may be performed.

(17) In the third embodiment, registration of history information may be performed at regular time intervals. In this case, the history information recording unit owns a timer function for setting a time at which history information is written regularly. After history information is written and the time set in the timer function has elapsed, judgment is performed as to whether or not a mounting-detect signal is received from the detection unit. If receiving a mounting-detect signal, the recording medium acquires date/time information and position information from the portable telephone, and with use of the acquired pieces of information, generates history information, and registers the generated history information to the history information table. The category information of the history information may be “mounting”, or may be information indicating that the registration of history information is performed by a regular inspection, such as “regular”.

In addition, after registration of history information, the registered history information is compared with the history information registered last time, for judging whether or not an input password should be received. If the judgment is affirmative, an input password is received, and correctness of the user is judged. If the user is judged to be a correct user, the operation from Step S 430 in FIG. 23 may be performed. In the alternative, only judgment as to the correctness of the user may be performed, and as for the accessible processes, the already stored information may continue to be used. In this case, comparison of history information may be performed using only the position information.

(18) Steps S 70 -S 83 of the first embodiment shown in FIG. 7 are not essential steps. If there is no authentication information that matches the received user information, the steps after Step S 70 may be omitted, or even Step S 70 and thereafter may be omitted.

Furthermore, in FIG. 16 which is for the second embodiment, steps S 225 -S 250 are performed when there is no authentication information that matches the received user information. However, the present invention is not limited to this. If there is no such authentication information, the steps after Step S 225 may be omitted, or even Step S 225 and thereafter may be omitted. Furthermore, Step S 250 is not essential, and may be omitted.

Furthermore, in FIG. 23 which is for the third embodiment, Step S 425 is not essential and may be omitted. Furthermore in FIG. 24 , if there is no authentication that matches the received user information, Steps S 455 to S 480 are performed. However, the present invention is not limited to such, and the steps after Step S 455 may be omitted, or even Step S 455 may be omitted. In addition, Step S 480 is not essential and may be omitted.

(19) At Step S 75 of FIG. 7 which is for the first embodiment, if there is no authentication-unnecessary number, the operation ends there. However, the present invention is not limited to such. If there is no authentication-unnecessary number, the process-in-use information stored in the process-name storage area may be used to control so that the process of the process name registered in the process-in-use information is made inaccessible.

In addition, if there is no authentication information at Step S 55 , it is also possible to perform Step S 70 , then control so that the process for the process name registered in the process-in-use information is made inaccessible with use of the process-in-use information stored in the process-name storage area, then end the operation. Alternatively, only the aforementioned control may be performed.

(20) Likewise, at Step S 230 of FIG. 16 which is for the second embodiment, if there is no authentication-unnecessary number, control may be performed so that the process for the process name registered in the process-in-use information is made inaccessible, with use of the process-in-use information stored in the process-name storage area.

In addition, if there is no authentication information at Step S 215 , it is also possible to perform Step S 225 , then control so that the process for the process name registered in the process-in-use information is made inaccessible with use of the process-in-use information stored in the process-name storage area, then end the operation. Alternatively, only the aforementioned control may be performed.

In addition, at Step S 240 of FIG. 16 which is for the second embodiment, if there is no process information, a message is output then the authentication operation ends. But the present invention is not limited to such, and another structure is also possible in which a message is output, and control is performed so that the process for the process name registered in the process-in-use information is made inaccessible with use of the process-in-use information registered in the process-name storage area, and the operation ends. In the alternative, if there is a set of a first number and a second number that corresponds to the set of the communication number acquired at the selection unit and the authentication-unnecessary number, access rights are set to the process for the process name registered in the process information that corresponds to the aforementioned set of the first number and the second number, so as to make the process accessible.

Furthermore, if there is no set of the first number and the second number that corresponds to the communication number and the authentication-unnecessary number, the following operation may be performed.

If there is a set of the first number and the second number that corresponds to a set of a communication number that corresponds to the communication information “N.A.” and the authentication-unnecessary number, access rights are set to the process for the process name registered in the process information that corresponds to the set of the first number and the second number, so that the process is made accessible. If there is no such set of the first number and the second number, control is performed so that the process for the process name registered in the process-in-use information is made inaccessible, with use of the process-in-use information stored in the process-name storage area, then the operation ends.

(21) At step S 420 of FIGS. 23 and 24 for the third embodiment, if the password is judged not to be correct, a message is output and the authentication operation ends. However, the present invention is not limited to this. An other structure is also possible in which, after a message is output, control is performed so that the process for the process name registered in the process-in-use information is made inaccessible with use of the process-in-use information stored in the process-name storage area, then the operation ends.

In addition, at Step S 460 , the same operation may be performed as that performed at Step S 230 in the aforementioned modification example (20). At Step S 445 , the same operation may be performed as that performed at Step S 215 in the aforementioned modification example (20). In addition, at Step S 470 , the same operation may be performed as that performed at Step S 240 in the aforementioned modification example (20).

(22) In the aforementioned modification examples (19), (20), and (21), in controlling so that the process for the process name registered in the process-in-use information is made inaccessible, the process-in-use information stored in the process-name storage area may be deleted after the process has been made inaccessible, so that there will be nothing stored in the process-name storage area.

(23) In the first embodiment, the storage area has two tables, an authentication information table, and a process information table. However, not limited to such, the first embodiment may have a structure in which the storage area has only one table that has both corresponding authentication information and process information.

Here, one example of such a table is shown in FIG. 26 . Each item therein is the same as that in the first embodiment, therefore will not be detailed here.

Likewise, in the second and third embodiments, the storage area has an authentication information table, a process information table, and a communication information table. However, not limited to such, the three tables may be integrated into one table.

Here, one example of such a table is shown in FIGS. 27 and 28 . FIG. 27 has only one piece of communication information, and FIG. 28 has a plurality of pieces of communication information. Each item therein is the same as those in the second and third embodiments, therefore will not be detailed here.

(24) As for the communication function described in the second and third embodiments, each function to be included therein such as a calling function, an electric mail function, and a call-reception function, may be registered individually. In the alternative, a communication number and an authentication number may be set to correspond to the content of the function. Further, it is possible to set a limit for the calling bill in using the communication function, so as to correspond a communication number and an authentication number, to the limit.

Furthermore, in the electronic commerce function, a communication number and an authentication number may be set according to the goods to be dealt with, or to the prices thereof.

Furthermore, in the second and third embodiments, functions that users can use are a memory function, a game function, a communication function, and an electronic commerce function. However, not limited to such, the functions may include others as long as they are accessible through the recording medium.

For example, it is possible to include an electric money function therein, and accordingly include “electric money function” in the process information table as process information item. At that time, it is possible to set a communication number and an authentication number for each function included in the electric money function, such assaying, balance-inquiry, and withdrawal.

Furthermore, it is possible to include a navigation function therein, and accordingly include “navigation function” in the process information table as process information item.

In addition, in the first embodiment, the processes that the user can use are the memory A, the memory B, and the game. However not limited to such, the processes may include others as long as they are accessible through the recording medium.

In addition, in the first, second, and third embodiments, the functions accessible to the user that are stored in the storage area of the recording medium have been stored at the time of purchase of the recording medium. However, not limited to such, the functions may be registered in the storage area at the time of setting the purchase information after the purchase.

(25) The present invention only permits use of the process for the process name acquired in authentication. However, not limited to such, the present invention may have a structure of including processes whose process names are acquired at the time of authentication, as processes that are allowed to be used, in addition to the processes that have been allowed to be used prior to starting of the authentication.

The following shows one example of a realization method in a case when process information storing process names corresponds to authentication information. The recording medium receives from the portable telephone process-add information that instructs to add processes to be allowed. Upon receiving the process-add information, the recording medium requests the portable telephone to input user information. The recording medium acquires an authentication number of the authentication information that matches the user information received from the portable telephone, and acquires process information that corresponds to the acquired authentication number. Then, the process whose process name has been registered in the acquired process information will be allowed to be used.

The following shows one example of a realization method in a case when process information storing process names corresponds to a set of communication information and authentication information. The recording medium stores therein the communication number selected in the last authentication. The recording medium, upon receiving process-add information from the portable telephone, requests the portable telephone to select communication information, then judges whether or not the communication information received from the portable telephone matches the communication information selected in the last authentication. If the two pieces of communication information are judged to match each other, the recording medium requests the portable telephone to input user information. The recording medium then acquires an authentication number for the authentication information that matches the user information received from the portable telephone, and acquires process information that corresponds to the set of the acquired authentication number and a communication number. Then, the process whose process name has been registered in the acquired process information will be allowed to be used. If the two pieces of communication information are judged not to match each other, the operation ends.

(26) In the third embodiment, date, time, and minute are used to show the time of mounting in history information. However, date, hour, minute, and second may be used therefore.

Moreover, the predetermined time interval stored in the recording medium is 30 minutes. However, not limited to such, it may be other time intervals. In addition, the time interval may be in a unit of any one of hour, minute, and second.

In addition, an external terminal is used to register a predetermined time interval that is to be stored in the recording medium. However, the registration may be performed from the portable telephone.

In addition, the position information is registered as the history information in a unit of municipalities. However, the value of its longitude and latitude may be used in registration. At this time, judgment as to whether or not the positions of mounting of the recording medium to the portable telephone are the same is based on the value of longitude and latitude of this time and the value of last time. If there is no difference there between, the positions may be judged to be the same. Or, it is also possible to calculate a distance of moving with use of the value of longitude and latitude of this time and the value of last time, and to judge that the positions are the same if the distance of moving is within a predetermined distance. In this case, the recording medium has to store the value of distance of moving that is to be considered the same position of mounting.

(27) In the present invention, the reference value which is the basis of judgment as to whether or not the fingerprint information matches the authentication information is 80%. However, other reference values may be used.

(28) In the present invention, the process for the process name that corresponds to the authentication-unnecessary number (herein after “authentication-unnecessary process”) is allowed when there is no authentication information that matches the user information received in authentication. However, not limited to this, the recording medium may allow use of an authentication-unnecessary process when receiving from the portable telephone information instructing to use the authentication-unnecessary process.

In the following, an example of a realization method in this case is described with use of the first embodiment. The recording medium, upon receiving authentication-start information, outputs, to the portable telephone, information for inquiring about whether an authentication-unnecessary process should be used. The recording medium then judges whether or not information received from the portable telephone is information instructing to use an authentication-unnecessary process. If the information is judged to instruct the use of an authentication-unnecessary process, the recording medium permits use of the authentication-unnecessary process. If the information is judged not to instruct the use of an authentication-unnecessary process, the recording medium outputs input-means information to the portable telephone. The operations hereafter are the same as those of the first embodiment, therefore will not be detailed here.

(29) In the present invention, it is also possible to enable use of an authentication-unnecessary process every time the recording medium is mounted to the portable telephone.

(30) In the present invention, the recording medium receives user information, and then permits use of a process that corresponds to authentication information that matches the received user information. However, the procedure is not limited to such, and it is also possible to have a procedure in which process information for the process that the user wants to use is received, and after that, the corresponding authentication information is received, which is then used for authentication.

The following shows one example of a realization method in a case when the process information corresponds to authentication information.

After receiving authentication-start information, the recording medium outputs to the portable telephone a list of process information registered in the process information table. The portable telephone, upon receiving the list of process information, displays the received list of process information, receives from the process information of his choice, and outputs the received process information to the recording medium. The recording medium acquires the authentication number that corresponds to the received process information, and judges whether or not the acquired authentication number is an authentication-unnecessary number. If it is judged to be an authentication-unnecessary number, the recording medium permits use of the process corresponding to the process information received from the portable telephone, without performing authentication. If it is judged not to be an authentication-unnecessary number, the recording medium requests the portable telephone to input user information that corresponds to the content of the authentication information for the acquired authentication number, then receives input of user information from the portable telephone. For example, if the content of the authentication information that corresponds to the acquired authentication number is fingerprint information, the recording medium requests input of fingerprint information. If the content thereof is character information, the recording medium requests input of character information. If the content thereof is both character information and fingerprint information, the recording medium requests input of both character information and fingerprint information.

The following shows one example of a realization method in a case when the process information corresponds to communication information and authentication information.

After receiving authentication-start information, the recording medium further receives number-to-be used information from the portable telephone. Next, the recording medium outputs to the portable telephone a list of process information registered in the process information table, and performs the procedure described above.

(31) In the present invention, use of a process is allowed at the time of authentication by setting an access rights to the process for the acquired process name. However, not limited to this, it is also possible to control in the following way. In advance, all the processes whose process name is registered in the process information are assigned access right so that they are accessible. The recording medium acquires process information according to the authentication content. After authentication, the recording medium receives, from the portable telephone, information instructing use of the process, judges whether or not the process to be used is a process whose process name has been registered in the process information acquired in authentication, and enables use of the process if the judgment is affirmative.

(32) In the present invention, if there are more than a piece of authentication information that match a received piece of user information, it is possible to set access rights to the corresponding number of processes, whose process names have being registered in pieces of process information that each correspond to each of the pieces of authentication information.

To explain the above, an example is taken where the recording medium has two pieces of fingerprint information taken from the same finger (herein after “first fingerprint information” and “second fingerprint information”). In this case, if the fingerprint information received in authentication matches both the first fingerprint information and the second fingerprint information, the authentication unit permits use of both the process for the process name registered in authentication information that corresponds to the first fingerprint information, and the process for the process name registered in authentication information that corresponds to the second fingerprint information.

(33) The present invention may be the methods described above. Furthermore, these methods may be a computer program that enables such a method to be executed by a computer. Moreover the present invention may be a digital signal comprised of the computer program.

In addition, the present invention may be a computer-readable recording medium such as a flexible disk, a hard disk, a CD-ROM, an MO, a DVD, a DVD-ROM, a DVD-RAM, a BD (Blu-ray Disc), and a semiconductor memory, that records thereon the aforementioned computer program or the digital signal. In addition, the present invention may be the aforementioned computer program or the digital signal, recorded on these recording media.

In addition, the present invention may be the aforementioned computer program or the digital signal, transmitted through a network and the like, represented by an electric communication circuit, a radio circuit, a cable communication circuit, and the Internet.

Furthermore, the present invention may be a computer system equipped with a microprocessor and a memory, where the memory stores thereon the aforementioned computer program, and the microprocessor performs according to the aforementioned computer program.

In addition, the present invention may be executed by an independent another computer system, by transmitting the aforementioned program or the digital signal recorded on the recording medium, or by transmitting the aforementioned program or the digital signal through the aforementioned network and the like.

(34) The present invention may be a combination of some of the described embodiments and the modification examples.

5. Summary

As described in the above sections, the present invention is a system of preventing unauthorized use of a recording medium which is mountable to a terminal device (“recording-medium unauthorized use prevention system”). This recording-medium unauthorized use prevention system is characterized by having a first storage area, a second storage area, an authentication unit, and a process unit, the first storage area storing thereon a plurality of pieces of authentication information used in determining whether or not use of the recording medium should be allowed, the second storage area storing thereon process means corresponding to the authentication information stored in the first storage area, the authentication unit performing authentication using the authentication information and user information that the owner of the recording medium has, and the process unit executing the process means according to the content of authentication performed by the authentication unit.

Here, the system may further have a third storage area for storing thereon communication information for using the communication function of the terminal device, and the process unit may execute the process means that corresponds to the communication information and the authentication content of the authentication unit.

Here, the system may further have a fourth storage area for storing thereon a plurality of pieces of communication information, and a selection unit that selects a piece of communication information that the user desires, and the process unit may execute the process means that corresponds to the communication information selected by the selection unit and the authentication content of the authentication unit.

Here, the system may further have a detection unit that detects mounting/dismounting of the recording medium to/from the terminal device, and authentication by the authentication unit may be performed, if the recording medium is to be used again after the detection unit has detected dismounting of the recording medium from the terminal device.

Here, the system may further have an authentication-information setting unit that sets the authentication information, and the authentication information set by the authentication-information setting unit may be stored in the first storage area.

Here, the system may further have a process-means setting unit that sets the process means, and the process means set by the process-means setting unit may be stored in the second storage area.

Here, the system may further have a communication-information setting unit that sets the communication information, and the communication information set by the communication-information setting unit may be stored in the third or fourth storage area.

Moreover, the present invention is a recording medium that is used in the system and is mountable to a terminal device. This recording medium is characterized by including at least a first storage area and a second storage area, the first storage area storing thereon a plurality of pieces of authentication information used for determining whether the recording medium can be used, and the second storage area storing thereon pieces of process means that are in correspondence with the pieces of authentication information.

Here, the recording medium may further have a third storage area storing thereon communication information for using the communication function of the terminal device.

Here, the recording medium may further have a fourth storage area storing thereon a plurality of pieces of communication information for using the communication function of the terminal device.

Here, the recording medium may further have an authentication unit that performs authentication using the authentication information and user information that the owner of the recording medium has.

Here, the recording medium may further have a detection unit that detects mounting/dismounting of the recording medium to/from the terminal device, and authentication by the authentication unit may be performed, if the recording medium is to be used again after the detection unit has detected dismounting of the recording medium from the terminal device.

In addition, the present invention is a terminal device which is used in the system and to which a recording medium is mountable. This terminal device is characterized by having at least a first storage area, a second storage area, an authentication unit, and a process unit, the first storage area storing thereon a plurality of pieces of authentication information used in determining whether or not use of the recording medium should be allowed, the second storage area storing thereon process means corresponding to the authentication information stored in the first storage area, the authentication unit performing authentication using the authentication information and user information that the owner of the terminal device has, and the process unit executing the process means according to the content of authentication performed by the authentication unit.

Here, the terminal device may further have a fourth storage area storing thereon a plurality of pieces of communication information for using the communication functions of the terminal device, and a selection unit that selects a piece of communication information that the user desires out of the pieces of communication information stored in the fourth storage area.

In addition, the present invention is a method of preventing unauthorized-use of a recording medium that is mountable to a terminal device. This unauthorized-use prevention method is characterized by having: a first storing step of storing a plurality of pieces of authentication information for determining whether or not use of the recording medium should be allowed; a second storing step of storing process means corresponding to the authentication information; an authentication step of performing authentication using the authentication information and user information that the owner of the recording medium has; and a process step of executing the process means according to the content of authentication performed at the authentication step. Furthermore, the present invention is a recording-medium unauthorized use prevention system for executing this method.

Furthermore, the present invention is a method of preventing unauthorized-use of a recording medium that is mountable to a terminal device. This method is characterized by having: a first storing step of storing a plurality of pieces of authentication information for determining whether or not use of the recording medium should be allowed; a second storing step of storing pieces of process means corresponding to the pieces of authentication information; a third storing step of storing communication information for using the communication function of the terminal device; an authentication step of performing authentication using the authentication information and user information that the owner of the recording medium has; and a process step of executing the process means according to the communication information and the content of authentication performed at the authentication step. Furthermore, the present invention is a recording-medium unauthorized use prevention system that executes this method.

Furthermore, the present invention is a method of preventing unauthorized use of a recording medium that is mountable to a terminal device. This method is characterized by having: a first storing step of storing a plurality of pieces of authentication information for determining whether or not use of the recording medium should be allowed; a second storing step of storing pieces of process means corresponding to the authentication information; a fourth storing step of storing a plurality of pieces of communication information for using the communication function of the terminal device; a selection step of selecting a piece of communication information that the user desires out of the pieces of communication information stored at the fourth storing step; an authentication step of performing authentication using the authentication information and user information that the owner of the recording medium has; and a process step of executing the process means according to the piece of communication information selected at the selection step and the content of authentication performed at the authentication step. Furthermore, the present invention is a recording-medium unauthorized use prevention system that executes this method.

6. The Effects of the Present Invention

As described in the above, the present invention is a portable recording medium including: a storage unit which stores therein storage authentication information that authenticates a user, and has an area that corresponds to the storage authentication information; a judgment unit operable to judge whether or not to perform authentication; a reception unit operable to receive reception authentication information that authenticates a user, if the judgment unit judges affirmative; an authentication unit that is tamper-resistant and is operable to judge whether or not the received reception authentication information matches the storage authentication information; and a process unit operable to permit use of the area if the reception authentication information is judged to match the storage authentication information.

According to the stated structure, the recording medium has an authentication unit that is tamper-resistant. Because of being tamper-resistant, the authentication unit is prevented from being decoded or tampered by third parties. According to this, the recording medium prevents unauthorized use of areas included therein by third parties.

Here, the storage unit may further store therein other storage authentication information different from the storage authentication information, and have another area that corresponds to the other storage authentication information, the authentication unit, instead of judging whether or not the received reception authentication information matches the storage authentication information, may judge whether or not the received reception authentication information matches the storage authentication information, and judge whether or not the received reception authentication information matches the other storage authentication information, and the process unit may further permit use of the other area, if the reception authentication information is judged to match the other storage authentication information.

According to the stated structure, the recording medium stores thereon other storage authentication information different from the storage authentication information, and has another area that corresponds to the other storage authentication information, and so it becomes possible to permit, if the received reception authentication information is judged to match the storage authentication information, use of the area corresponding thereto, and to permit, if the received reception authentication information is judged to match the other storage authentication information, use of the other area corresponding thereto.

Here, the recording medium may further include a detection unit operable to detect that the recording medium is mounted to a terminal device, where the judgment unit may judge that authentication is to be performed, after the detection unit has detected the mounting.

According to the stated structure, the recording medium is able to judge whether or not to perform authentication, if the mounting thereof to an external device is detected.

Here, the recording medium may further include a recording unit operable to record, when the detection unit has detected the mounting, first history information that indicates the mounting, the recording unit recording in advance second history information that indicates another mounting that occurred prior to the mounting, where the judgment unit may judge whether or not to perform authentication, using the first history information and the second history information.

According to the stated structure, the judgment unit is able to perform judgment whether or not to perform authentication, with use of the first and second history information.

Here, the first history information may have first date/time information that shows date and time in which the mounting is detected, the second history information may have second date/time information that shows date and time in which the other mounting is detected, and the judgment unit may judge that authentication is to be performed, if a difference in date and time between the first date/time information and the second date/time information is no smaller than a predetermined value.

According to the stated structure, the judgment unit is able to judge whether or not to perform authentication, if the difference in date and time is no smaller than a predetermined value.

Here, the first history information may have first position information that shows a position at which the mounting is detected, the second history information may have second position information that shows a position at which the other mounting is detected, and the judgment unit may judge that authentication is to be performed, if a difference in position between the first position information and the second position information is no smaller than a predetermined value.

According to the stated structure, the judgment unit is able to judge whether or not to perform authentication, if the difference in position is no smaller than a predetermined value.

Here, the storage authentication information may be one of first character information, first biological information, and first combination information, the first character information comprising at least one number, letter, and symbol, the first biological information showing biological characteristics of the user, and the first combination information comprising first character information and first biological information. Further, the reception authentication information may have second character information, second biological information, and second combination information. The second character information comprising at least one number, letter, and symbol, the second biological information showing biological characteristics of the user, and the second combination information comprising second character information and second biological information,

and the authentication unit, when the received reception authentication information is the second character information, may judge whether or not the second character information matches the first character information, and when the received reception authentication information is the second biological information, judge whether or not the second biological information matches the first biological information, and when the received reception authentication information is the second combination information, judge whether or not all information included in the second combination information matches all information included in the first combination information.

According to the stated structure, the authentication unit is able to perform judgment as to one of: whether or not the first character information matches the second character information; whether or not the first biological information matches the second biological information; and whether or not the first combination information matches the second combination information.

Here, the first biological information and the second biological information may be one of fingerprint information, voice print information, iris information, face-outline information, and DNA information, the fingerprint information showing characteristics of the user's fingerprint pattern, the voice print information showing characteristics of the user's voice print, the iris information showing characteristics of the user's iris, the face-outline information showing characteristics of outline of the user's face, and the DNA information showing characteristics of the user's DNA.

According to the stated structure, the first biological information and the second biological information may be one of fingerprint information, voice print information, iris information, face-outline information, and DNA information.

Here, the recording medium may be assigned a telephone number that the terminal device uses in communication, the storage unit may further store therein communication information that represents the telephone number, the area may further correspond to the communication information, and the process unit may further permit use of the area that corresponds to the communication information.

According to the stated structure, the area of the storage unit is further be corresponded to communication information, and the process unit is further able to permit use of the area corresponded to the communication information.

Here, the recording medium may further include a selection unit operable to receive selection of the communication information, where the process unit may further permit use of the area that corresponds to the communication information selected through the selection unit.

According to the stated structure, the communication information is able to be selected by the selection unit, and the process unit is further able to permit use of the area corresponded to the communication information that has been received by the selection unit.

Here, the recording medium may further include a setting unit operable to receive the storage authentication information and to write to the storage unit the received storage authentication information in correspondence with the area of the storage unit.

According to the stated structure, storage authentication information is able to correspond to the area of the storage unit, before being stored.

Here, the setting unit may further receive communication information that represents a telephone number assigned to the recording medium, and write to the storage unit the received communication information in correspondence with the area.

According to the stated structure, the setting unit is further able to store communication information in correspondence with the area of the storage unit.

Although the present invention has been fully described by way of examples with reference to the accompanying drawings, it is to be noted that various changes and modifications will be apparent to those skilled in the art. Therefore, unless otherwise such changes and modifications depart from the scope of the present invention, they should be construed as being included therein.