Portable terminal, access control method, and access control program

• US 7,031,695 B2
• Filed: 04/23/2003
• Issued: 04/18/2006
• Est. Priority Date: 04/23/2002
• Status: Expired due to Fees

• Current Assignee: NTT Docomo Incorporated (Nippon Telegraph and Telephone Corporation)
• Original Assignee: NTT Docomo Incorporated (Nippon Telegraph and Telephone Corporation)
• Inventors: Ishii, Kazuhiko, Mori, Kensaku, Aono, Hiroshi, Hongo, Sadayuki
• Primary Examiner(s): Deane, Jr., William J.
• Application Number:
  US10/420,844
• Publication Number:
  US 20030220097A1
• Time in Patent Office: 1,091 Days
• Field of Search: 455/410, 455/411, 455/414.1, 455/414.2, 455/422.1, 379/218.01
• US Class Current: 455/411
• CPC Class Codes: H04M 1/667 Preventing unauthorised calls from a telephone set H04M1/677 takes precedence

Abstract

A portable terminal 10 according to the present invention is provided with a request acquiring means, a verifying means, and an output means. The request acquiring means acquires an access right authentication request from a display application 153 to a telephone directory management application 152 managing telephone directory data stored in a telephone directory database 151, along with application authentication information held by the display application 153. The verifying means determines the validity of the application authentication information in accordance with the access right authentication request. When it is determined that the application authentication information is valid, the output means permits the access right authentication request and outputs the telephone directory data to the display application 153 in accordance with an access request to the telephone directory data.

Claims

1. A portable terminal comprising:

telephone directory data storing means for storing telephone directory data;

request acquiring means for acquiring an access right authentication request to a telephone directory management application program managing said telephone directory data stored in the telephone directory data storing means, from another application program which is downloaded into the portable terminal, along with application authentication information held by said application program;

verifying means for determining validity of the application authentication information in accordance with the access right authentication request acquired by said request acquiring means; and

output means configured so that when the verifying means determines that the application authentication information is valid, the output means admits the access right authentication request and outputs the telephone directory data to the application program in accordance with a request for access to the telephone directory data.

2. The portable terminal according to claim 1, wherein said application authentication information includes a digital signature and a public key certificate.

3. The portable terminal according to claim 2, wherein said application authentication information further includes an attribute certificate.

4. The portable terminal according to claim 2, wherein said digital signature is an electronic signature issued and added by a third party certification organization.

5. The portable terminal according to claim 2, wherein said digital signature comprises a place of origin thereof.

6. The portable terminal according to claim 5, wherein said digital signature is encrypted.

7. The portable terminal according to claim 1, further comprising:

physical information storing means for storing a physical information item indicating a physical feature of a principal; and

determining means for collating the physical information item stored in said physical information storing means, with a physical information item of a user having made said access right authentication request, to determine the identity of the physical information items,

wherein when said determining means determines that said physical information items are identical with each other, said request acquiring means acquires user authentication information reflecting the result of the determination,

wherein said verifying means determines validity of the user authentication information in accordance with the access right authentication request acquired by the request acquiring means, and

wherein when said verifying means determines that the user authentication information is valid, said output means admits the access right authentication request and outputs the telephone directory data to the application program in accordance with the request for access to the telephone directory data.

8. The portable terminal according to claim 7, wherein said physical information items are fingerprint information items.

9. The portable terminal according to claim 7, wherein said physical information item is an iris information item.

10. The portable terminal according to claim 7, wherein said physical information item is a retina information item.

11. The portable terminal according to claim 7, wherein said physical information item is a voice spectrum information item.

12. The portable terminal according to claim 7, wherein said physical information item is a face image information item.

13. The portable terminal according to claim 1, wherein said access right authentication request is a display right authentication request of the telephone directory data to the telephone directory management application program,

wherein said access request is a request for display of the telephone directory data, and

wherein said output means makes display means display the telephone directory data in accordance with the display request.

14. The portable terminal according to claim 1, wherein said access right authentication request is a request for authentication of a call origination right to a telephone number included in the telephone directory data, to said telephone directory management application program, wherein said access request is a request for origination of a call to said telephone number, and

wherein said output means has a call originated to the telephone number in accordance with the call origination request.

15. The portable terminal according to claim 1, wherein said telephone directory data storing means comprises a first area for storing Chinese characters and a second area for storing kana characters indicating the reading of the Chinese characters or English notation English notations corresponding to the Chinese characters.

16. The portable terminal according to claim 15, wherein said telephone directory data is encrypted.

17. The portable terminal according to claim 1, wherein said telephone directory data is encrypted.

18. The portable terminal according to claim 1, wherein said telephone directory data storing means is located in a non-tamper area.

19. An access control method in which a portable terminal acquires an access request from an application program, said access control method comprising:

a request acquiring step wherein the portable terminal acquires an access right authentication request to a telephone directory management application program managing a telephone directory data stored in telephone directory data storing means of the portable terminal, from another application program which is downloaded into the portable terminal, along with application authentication information held by said application program;

a verifying step wherein the portable terminal determines validity of the application authentication information in accordance with the access right authentication request acquired in the request acquiring step; and

an output step wherein when it is determined in the verifying step that the application authentication information is valid, the portable terminal admits the access right authentication request and outputs the telephone directory data to the application program in accordance with a request for access to the telephone directory data.

20. A computer program product for storing instructions for execution by a processor, which when executed by the processor, causes the processor to make a portable terminal configured to acquire an access request from an application program perform processes comprising:

a acquiring an access right authentication request to a telephone directory management application program managing the telephone directory data stored in telephone directory data storing means of the portable terminal, from another application program which is downloaded into the portable terminal, along with application authentication information held by said application program;

determining validity of the application authentication information in accordance with the access right authentication request thus acquired; and

admitting the access right authentication request when it is determined that the application authentication information is valid, and outputting the telephone directory data to the application program in accordance with the access request to the telephone directory data.