Anti-theft system and method for mobile phone

A mobile phone anti-theft system includes a mobile phone, a SIM card and a real-name card-issuing system. The real-name card-issuing system includes a central processing unit, a first user information storage area, transmission equipment, and a card reader. The SIM card communicates with the central processing unit through the card reader and the transmission equipment. The real-name card-issuing system sends user information stored in the first user information storage area to the SIM card. If the SIM card needs to change the user information, it should verify first cryptographic keys with the real-name card-issuing system. The mobile phone includes a micro control unit, a second user information storage area and a transmission unit. The SIM card communicates with the micro control unit through the transmission unit. After each startup of the mobile phone, the mobile phone verifies second cryptographic keys with the SIM card.

BACKGROUND

1. Technical Field

The present disclosure relates to an anti-theft system and method for mobile phone.

2. Description of Related Art

With the development of wireless communication and information processing technology, portable electronic devices, such as mobile phones are now in widespread use.

However, as mobile phones become smaller, the mobile phones may be more easily lost or stolen.

Therefore, there is room for improvement within the art.

DETAILED DESCRIPTION

FIG. 1andFIG. 2show a mobile phone anti-theft system according to an exemplary embodiment. The mobile phone anti-theft system includes a real-name card-issuing system10, a mobile phone20and a SIM card30.

Referring toFIG. 1, the real-name card-issuing system10is the information management system of the communication operators, i.e., wireless carriers. The real-name card-issuing system10includes a central processing unit100, a first user information storage area102, transmission equipment104, an examination smart card106, an initialization smart card108and a card reader110. The first user information storage area102, the central processing unit100, the transmission equipment104and the card reader110are electronically connected together. The examination smart card106, the initialization smart card108and the SIM card30can communicate with the central processing unit100through the card reader110and the transmission equipment104. The transmission equipment104reads the information from the card connected to the card reader110and sends the information to the central processing unit100. The card reader110should be only connected to one card at a time. The examination smart card106includes a first processor1061and a first storage area1063. The initialization smart card108includes a second processor1081and a second storage area1083. The SIM card30includes a third processor32and a third storage area34. The third storage area34stores user information, first cryptographic keys and second cryptographic keys.

Referring also toFIG. 2, the mobile phone20includes a micro control unit21, a second user information storage area23and a transmission unit25. The second user information storage area23, the micro control unit21and the transmission unit25are electronically connected together. The transmission unit25reads the information from the card inserted into the mobile phone20and sends the information to the micro control unit21. The SIM card30, the examination smart card106, and the initialization smart card108can communicate with the micro control unit21through the transmission unit25. The examination smart card106and the initialization smart card108are owned by the communication operators, so when the examination smart card106or the initialization smart card108is inserted into the mobile phone20, the mobile phone20can be operated normally without verifying the cryptographic keys. When the SIM card30is inserted into the mobile phone20, the second cryptographic keys should be verified before using the mobile phone20.

Referring toFIG. 3andFIG. 4, the first processor1061and the second processor1081can communicate with the micro control unit21through the transmission unit25. Referring toFIG. 5, the SIM card30should be registered in the real-name card-issuing system10before the initial use. If the user information of the SIM card30needs to be changed, first, the real-name card-issuing system10should verify the first cryptographic keys of the SIM card30. The processes of the registering and making changes in the user information of the SIM card30may include the following steps:

In step S1, the user information such as user name, sex, ID number, address and so on are inputted into the real-name card-issuing system10and saved in the first user information storage area102.

In step S2, the SIM card30is electronically connected to the card reader110, the card reader110reads the information of the SIM card30and sends the information to the central processing unit100. The central processing unit100judges whether the SIM card30is new. If the SIM card30is new, the process goes to step S3, where the real-name card-issuing system10sends the user information inputted in step S1to the SIM card30. If the SIM card30is not new, the process goes to step S6, where the real-name card-issuing system10sends the user information inputted in the step S1and the first cryptographic keys stored in the first user information storage area102to the SIM card30.

In step S4, the third processor32receives the user information and saves it in the third storage area34. The third processor32randomly generates initial keys and sends them to the real-name card-issuing system10.

In step S5, the real-name card-issuing system10receives the initial keys as the first cryptographic keys and saves the initial cryptographic keys to the first user information storage area102. Thus, the registration of the SIM card30is completed.

In step S7, the SIM card30receives the user information and the first cryptographic keys.

In step S8, the SIM card30judges whether the first cryptographic keys are validated. If the first cryptographic keys are validated, the process goes to step S9, where the SIM card30updates the user information and sends random cryptographic keys to the real-name card-issuing system10. If the first cryptographic keys are not validated, the process goes to step S11, where the SIM card30sends update failure message to the real-name card-issuing system10. Thus, the SIM card30can not be used.

In step S10, the real-name card-issuing system10receives the random cryptographic keys and saves the random cryptographic keys to the first user information storage area102. Thus, the user information is updated and the first cryptographic keys verification between the real-name card-issuing system10and the SIM card30is completed.

Referring toFIG. 6, the SIM card30should have registered in the real-name card-issuing system10before being used in the mobile phone20. After each startup of the mobile phone20, the mobile phone20verifies the second cryptographic keys of the SIM card30. The processes of the second cryptographic keys setting and verification between the SIM card30and the mobile phone20may include the following steps:

In step S12, the SIM card30is inserted into the mobile phone20and the mobile phone20is turned on.

In step S13, the third processor32judges whether the mobile phone20is new. If the mobile phone20is new, the process goes to step S14, where the third processor32sends the user information to the micro control unit21. If the mobile phone20is not new, the process goes to step S17, where the third processor32sends the user information and the second cryptographic keys to the micro control unit21.

In step S15, the micro control unit21receives the user information and saves it to the second user information storage area23. The micro control unit21randomly generates cryptographic keys and sends them to the third processor32.

In step S16, the third processor32receives the random cryptographic keys as the second cryptographic keys and saves the random cryptographic keys to the third storage area34. Thus, the second cryptographic keys setting between the SIM card30and the mobile phone20is completed.

In step S18, the micro control unit21receives the user information and the second cryptographic keys and judges whether the second cryptographic keys are validated. If the second cryptographic keys are not validated, the process goes to step S19, where the mobile phone20is locked. If the second cryptographic keys are validated, the process goes to step S20, where the micro control unit21judges whether the user information is changed according to the user information comparison between the second user information storage area23and the third storage area34.

In step S20, if the user information is changed, the process goes to step S21, where the micro control unit21updates the user information and sends random cryptographic keys to the SIM card30. If the user information is not changed, the process goes to step S23, where the micro control unit21randomly generates cryptographic keys and sends them to the third processor32.

In step S22, the third processor32receives the random cryptographic keys and saves the random cryptographic keys to the third storage area34. Thus, the user information update and the second cryptographic keys verification between the SIM card30and the mobile phone20is completed.

In step S24, the SIM card30receives the random cryptographic keys of the step S23and saves the random cryptographic keys to the third storage area34. Thus, the second cryptographic keys verification between the SIM card30and the mobile phone20is completed.

Referring toFIG. 7, a flow chart of the mobile phone initialization is shown. If the mobile phone20needs to use another new SIM card or another old SIM card, the real-name card-issuing system10should initialize the mobile phone20. The process of the mobile phone initialization may include the following steps:

In step S25, the examination smart card106is inserted into the mobile phone20and the mobile phone20is turned on.

In step S26, the first processor1061sends instructions of reading the user information to the micro control unit21.

In step S27, the micro control unit21receives the instructions of reading the user information and sends the user information of the second user information storage area23to the first processor1061. The first processor1061receives the user information and saves it to the first storage area1063.

In step S28, the examination smart card106is taken out of the mobile phone20and connected to the card reader110.

In step S29, the central processing unit100reads the user information from the examination smart card106and judges whether there is a need for initializing the mobile phone20according to the effective ID of the user, i.e., valid ID card. If the effective ID of the user corresponds with the user information stored in the examination smart card106, the process goes to step S30, where the initialization smart card108is inserted into the mobile phone20and the mobile phone20is turned on. If the effective ID of the user does not correspond with the user information stored in the examination smart card106, the process goes to step S19, where the mobile phone20is locked.

In step S31, the second processor1081of the initialization smart card108sends the initialization commands to the micro control unit21.

In step S32, the mobile phone20is initialized, the process goes to step S12.

According to the first cryptographic keys authentication, the second cryptographic keys authentication and the real-name card-issuing system, the mobile phone can not be used if the SIM card is changed. If the user want to change the SIM card, the effective ID of the user must be shown to the communication operators, and the communication operators makes the real-name card-issuing system to compare the user information with the effective ID. If the effective ID of the user corresponds with the user information, the mobile phone will be initialized, and then the user can change the SIM card.