Mobile communication terminal

Abstract

To safely store secret information that is used for using crypto assets such as private keys and that should be kept secret.SOLUTION: A smartphone 10 is a mobile communication terminal that can be equipped with a SIM 20, which is a subscriber authentication module that is used for using crypto assets and stores subscriber information used for mobile communication. The smartphone includes an acquisition unit 12 that acquires multiple pieces of divided information into which secret information that is used for using crypto assets and should be kept secret is divided, a memory unit 13 that stores some of the acquired pieces of divided information in the SIM 20 and some of the pieces of divided information in memory areas 11 of the own terminal other than the SIM 20, and a utilization unit 14 that generates the secret information from the multiple pieces of divided information stored in different memory areas and uses the secret information for using the crypto assets.SELECTED DRAWING: Figure 1

Description

[Technical Field]

[0001] The present invention relates to a mobile communication terminal used for utilizing crypto assets. [Background technology]

[0002] BACKGROUND ART Conventionally, it has been proposed to store a private key used for using crypto assets (virtual currencies) in a mobile communication terminal (see, for example, Patent Document 1). [Prior art documents] [Patent documents]

[0003] [Patent Document 1] Japanese Patent Publication No. 2020-35106 Summary of the Invention [Problem to be solved by the invention]

[0004] If the private key is leaked, there is a risk that the crypto-assets may be illegally withdrawn by a third party. As mentioned above, simply storing the private key in the mobile communication terminal does not necessarily mean that the private key is kept secure.

[0005] The present invention has been made in consideration of the above, and aims to provide a mobile communication terminal that can be used to utilize cryptographic assets such as private keys and can safely store confidential information that should be kept secret. [Means for solving the problem]

[0006] In order to achieve the above-mentioned object, the mobile communications terminal of the present invention is a mobile communications terminal that is capable of being equipped with a subscriber authentication module that is used for using crypto assets and stores subscriber information used for mobile communications, and is equipped with an acquisition unit that acquires multiple pieces of divided information that are used for using crypto assets and that should be kept secret, a memory unit that stores one of the pieces of divided information acquired by the acquisition unit in the subscriber authentication module and one of the pieces of divided information in a memory area of ​​the terminal other than the subscriber authentication module, and a utilization unit that generates confidential information from the multiple pieces of divided information stored in different memory areas by the memory unit and uses the confidential information for using the crypto assets.

[0007] According to the mobile communication terminal of the present invention, the divided information can be stored in a plurality of independent storage areas, thereby enabling the confidential information to be stored safely. [Effects of the Invention]

[0008] According to the present invention, confidential information that is used for utilizing cryptographic assets such as private keys and that should be kept secret can be safely stored. [Brief explanation of the drawings]

[0009] [Figure 1] 1A and 1B are diagrams illustrating a configuration of a smartphone that is a mobile communication terminal according to an embodiment of the present invention, and a configuration of a system including the smartphone. [Figure 2] 1 is a graph showing an example of a private key and multiple shares. [Figure 3] 10 is a flowchart showing a process executed when a share is stored in a storage area in a smartphone, which is a mobile communication terminal according to an embodiment of the present invention. [Figure 4] 10 is a flowchart showing a process executed when a private key is used in a smartphone, which is a mobile communication terminal according to an embodiment of the present invention. [Figure 5] FIG. 1 is a diagram illustrating a hardware configuration of a smartphone that is a mobile communication terminal according to an embodiment of the present invention. DETAILED DESCRIPTION OF THE INVENTION

[0010] Hereinafter, an embodiment of a mobile communication terminal according to the present invention will be described in detail with reference to the drawings. In the description of the drawings, the same elements are given the same reference numerals and duplicated explanations will be omitted.

[0011] 1 shows a smartphone 10, which is a mobile communication terminal according to this embodiment. The smartphone 10 is a mobile communication terminal that performs mobile communication in a mobile communication network (by connecting to the mobile communication network). Note that the mobile communication terminal according to this embodiment may be a mobile communication terminal other than the smartphone 10.

[0012] The smartphone 10 may include a subscriber identity module (SIM) 20, which is a subscriber authentication module that stores subscriber information (profile) used in mobile communications. The SIM 20 may be detachable from the smartphone 10. The subscriber information may be, for example, a mobile subscriber ISDN number (telephone number), an international mobile subscriber identity (IMSI), and authentication information provided by a mobile communications network carrier. The smartphone 10 performs mobile communications using information stored in the SIM 20 attached to the smartphone 10. A conventional SIM may be used as the SIM 20. Mobile communications using the information stored in the SIM 20 may also be performed in the same manner as conventional ones. The subscriber authentication module may be anything other than the SIM 20, as long as it is attached to a mobile communications terminal and stores subscriber information used in mobile communications.

[0013] The smartphone 10 is also used to use crypto assets (virtual currencies). Specifically, the smartphone 10 is a crypto asset wallet. For example, when a wallet application is installed and executed on the smartphone 10, the smartphone 10 becomes a crypto asset wallet. The crypto assets used by the smartphone 10 may be the same as conventional crypto assets, such as Ethereum, Solana, and Polkadot (crypto assets used on these platforms).

[0014] Confidential information is used when using crypto assets. Confidential information is information that should be kept secret from anyone other than the owner of the crypto assets, i.e., the user of the smartphone 10. The confidential information is, for example, a private key. The private key is information for each crypto asset (e.g., for each type of crypto asset or each account). If the private key is leaked, the crypto assets may be used fraudulently. Since crypto assets typically do not have a centralized administrator, accounts cannot be suspended or restored by anyone other than the owner of the crypto assets. Therefore, if the private key is leaked, it is impossible to prevent the crypto assets from being used fraudulently. As will be described later, the smartphone 10 has a function according to this embodiment for safely storing confidential information. This function may be implemented, for example, by the wallet application described above, or by other means. Furthermore, although the confidential information targeted by the function according to this embodiment is a private key, it may also be confidential information other than a private key (e.g., a secret recovery phrase).

[0015] Next, the functions of the smartphone 10 according to this embodiment will be described. The smartphone 10 may have the functions of a conventional mobile communication terminal such as a conventional smartphone. The smartphone 10 may also have the functions of a conventional cryptocurrency wallet.

[0016] The smartphone 10 uses multiple storage areas to implement the functions according to this embodiment. One of the multiple storage areas is a SIM 20 attached to the smartphone 10. For example, as shown in FIG. 1 , a secure element 20a included in the SIM 20 is used for the functions according to this embodiment. Note that a storage area of ​​the SIM 20 other than the secure element 20a may also be used as the storage area used for the functions according to this embodiment.

[0017] One of the multiple storage areas is a storage area provided in the smartphone 10 body. For example, as shown in FIG. 1, it is an application storage area 11 used for a wallet application, which is a preset part of the storage areas provided in the smartphone 10 body. Note that a storage area provided in the smartphone 10 body other than the above may be used as a storage area used for the function according to this embodiment. Also, a storage area other than the above two may be used for the function according to this embodiment.

[0018] As shown in FIG. 1, the smartphone 10 includes an acquisition unit 12, a storage unit 13, and a utilization unit 14 as functional units.

[0019] The acquisition unit 12 is a functional unit that acquires a plurality of pieces of divided information into which secret information that is used for utilizing crypto assets and that should be kept secret is divided. The acquisition unit 12 may acquire secret information by acquiring the secret information and dividing the acquired secret information into a plurality of pieces of divided information.

[0020] As described above, in this embodiment, the confidential information is a private key. The acquisition unit 12 acquires the private key in a conventional manner. For example, when the user of the smartphone 10 uses a crypto asset for the first time, the private key is acquired from a server (not shown) that issues the crypto asset. The private key is paired with a public key, and the acquisition unit 12 also acquires the public key that is paired with the private key. The public key may be used in the same manner as a conventional public key when using the crypto asset.

[0021] The divided information is obtained by dividing the secret information and is used to generate the secret information. A predetermined number of divided information pieces are generated by dividing the secret information. In this embodiment, the divided information pieces of the private key are called shares. The private key can be generated (regenerated) from a predetermined number of different shares (note that this number does not have to match the number of divided information pieces). The private key cannot be generated from fewer than the predetermined number of shares. In this embodiment, as will be described later, three shares are generated from the private key, and the private key can be generated from any two of these shares.

[0022] The private key is, for example, a string of numbers and can be treated as a numerical value. Each share is, for example, a coordinate in a two-dimensional coordinate space. Figure 2(a) shows an example of a private key and multiple shares in this case. For the private key value b and a predetermined value a, the shares are the coordinates on the line indicated by y = ax + b in a two-dimensional space having an x-axis and a y-axis. In this case, the y-intercept, which is the y-coordinate of the coordinate (0, b) at the intersection of the above line with the y-axis, is the private key value b. If the coordinates of the two shares can be known, a line can be calculated and its y-intercept can be calculated as the private key value b.

[0023] The acquisition unit 12 generates multiple shares from the acquired private key using a pre-stored method. For example, the acquisition unit 12 generates multiple shares using Shamir's threshold method (a low-dimensional example) as follows: The acquisition unit 12 sets a predetermined coordinate in two-dimensional space as a key share, which is one of the multiple shares to be generated. The coordinates of the key share may be selected randomly or may be calculated based on a preset calculation rule. The acquisition unit 12 calculates a line passing through the coordinates of the key share, with the private key value b as the y-intercept. That is, the acquisition unit 12 calculates a in y = ax + b from the y-intercept, which is the private key value b, and the coordinates of the key share. The acquisition unit 12 sets the coordinates of two different points on the calculated line other than the key share coordinate and the y-intercept as shares (e.g., share A and share A' in FIG. 2(a)). The coordinates of the shares on the line may be selected randomly or may be calculated based on a preset calculation rule.

[0024] As described above, since the private key is information for each crypto asset, when multiple crypto assets are used on the smartphone 10, the acquisition unit 12 acquires a share of the private key for each crypto asset. For example, when three types of crypto assets, crypto assets A, B, and C, are used on the smartphone 10, the acquisition unit 12 acquires shares of the corresponding private keys A, B, and C, as shown in FIG. 1.

[0025] The acquisition unit 12 outputs the generated shares (for example, the three shares of the key share, share A, and share A' in FIG. 2(a)) to the storage unit 13. After generating the shares, the acquisition unit 12 discards the private key. For example, the utilization unit 14 deletes the private key from the storage area of ​​the smartphone 10. By discarding the private key, leakage of the private key is prevented. Furthermore, by discarding the private key, it becomes necessary to generate a private key from multiple shares when using the private key thereafter, i.e., when using crypto assets.

[0026] It should be noted that the division of the private key, i.e., the generation of shares, does not necessarily have to be performed as described above and may be performed in a manner other than the above. Furthermore, the private key and shares do not have to be a string of numbers and coordinates as described above, but may be anything that allows the private key to be generated from multiple shares.

[0027] The storage unit 13 is a functional unit that stores any of the divided information acquired by the acquisition unit 12 in the subscriber authentication module, and stores any of the divided information in a storage area of ​​its own terminal other than the subscriber authentication module. The storage unit 13 may store any of the divided information in a device on a mobile communication network related to mobile communication by the subscriber authentication module. For example, the storage unit 13 stores shares, which are the divided information, in a storage area as follows.

[0028] The storage unit 13 receives a plurality of shares from the acquisition unit 12. The storage unit 13 stores one of the received shares other than the key share (for example, share A shown in FIG. 1) in the secure element 20a of the SIM 20. The storage unit 13 stores the received shares other than the key share and the share stored in the secure element 20a of the SIM 20 (for example, share A' shown in FIG. 1) in the application storage area 11. When storing shares in each storage area 20a, 11, it is made possible to determine which crypto asset private key the share to be stored corresponds to (the same applies below).

[0029] The storage unit 13 transmits key shares, which are shares other than those stored in the secure element 20a of the SIM 20 and the application storage area 11, to the wallet management server 30, and stores the key shares in the wallet management server 30. The wallet management server 30 is a device on a mobile communication network related to mobile communication by the SIM 20.

[0030] The wallet management server 30 receives and stores key shares transmitted from the smartphone 10. When storing key shares in the wallet management server 30, it is necessary to determine which SIM 20 and which crypto asset private key the stored share corresponds to. For example, the wallet management server 30 is provided by a telecommunications carrier of the mobile communication network. Storing one of the shares in the wallet management server 30 can improve user convenience, as described below. Note that the share stored in the wallet management server 30 does not have to be a key share, and may be a share other than a key share. Furthermore, the key share may be stored in either the secure element 20a of the SIM 20 or the application storage area 11.

[0031] The utilization unit 14 is a functional unit that generates secret information from the multiple pieces of divided information stored in different memory areas by the memory unit 13 and uses the secret information for utilizing the crypto asset. The utilization unit 14 may discard the generated secret information after using it for utilizing the crypto asset. For example, the utilization unit 14 generates a private key, which is secret information, as follows and uses it for utilizing the crypto asset.

[0032] In this embodiment, the use of crypto assets is, for example, payment with crypto assets for services or NFTs (non-fungible tokens), i.e., remittance to another wallet address. However, the use of crypto assets may be other than the above.

[0033] The utilization unit 14 inputs a trigger for the use of crypto assets. For example, the utilization unit 14 inputs a trigger for a payment using crypto assets. The trigger for the use of crypto assets is, for example, an operation on the user's smartphone 10. The trigger may also be something else. The utilization unit 14 may input information specifying the crypto assets to be used along with the trigger.

[0034] When the utilization unit 14 receives the trigger, it reads shares related to the crypto asset to be used from the secure element 20a of the SIM 20 and the application storage area 11. The utilization unit 14 generates a private key from each of the read shares. The generation of the private key from multiple shares may be performed using a method corresponding to the method of generating shares from a private key. For example, in the example of the private key and shares shown in FIG. 2, a line may be calculated from the coordinates of the shares, and the y-intercept of the line may be used as the private key. Note that the generation of the private key from the shares does not necessarily have to be performed as described above, and may be performed using a method other than the above.

[0035] The utilization unit 14 uses the generated private key to utilize the crypto asset. For example, the utilization unit 14 transmits the generated private key to the server 40 of the crypto asset payment destination. Typically, a server 40 is provided as a Web3 service for each type of crypto asset to be utilized (for example, for each of crypto asset A, crypto asset B, and crypto asset C as shown in FIG. 1). Note that the manner in which the utilization unit 14 utilizes the private key when utilizing the crypto asset may be the same as in the conventional manner, including the manner described above.

[0036] When the utilization unit 14 has finished utilizing the crypto asset, it discards the generated private key. For example, the utilization unit 14 deletes the private key from the storage area of ​​the smartphone 10. The utilization unit 14 also discards the shares from the storage area of ​​the smartphone 10 (other than the secure element 20a of the SIM 20 and the storage area 11 for applications) that were read out for use in generating the private key. The shares may be discarded when the private key is generated. The utilization unit 14 generates a private key each time it is utilized. During times when the private key is not utilized, the smartphone 10 stores only the shares from the secure element 20a of the SIM 20 and the storage area 11 for applications as information related to the private key.

[0037] In the above, the generation of shares by the acquisition unit 12 and the storage by the storage unit 13 are performed, for example, when a private key is acquired from the server that issues the crypto asset, but they may also be performed at other times. Furthermore, the private key used to generate new shares at this time may be generated from shares that were previously generated for that private key and stored in the storage area.

[0038] For example, if there is a risk that some of the shares related to the private key have been leaked (for example, if one share has been stolen), the acquisition unit 12 reads the shares from the secure element 20a of the SIM 20 and the application storage area 11, respectively, in the same manner as the method used by the utilization unit 14, and generates and acquires the private key. The acquisition unit 12 generates shares from the acquired private key in the same manner as described above. Note that when shares are regenerated, the regenerated shares are made different from the old shares. For example, when shares are generated using the method described in FIG. 2(a), each share can be generated by generating key shares that are different from the old key shares, as shown in FIG. 2(b).

[0039] The storage unit 13 also stores the shares generated by the acquisition unit 12 in the storage area in the same manner as described above. The shares may be recreated and re-stored, for example, in response to an operation by the user of the smartphone 10, an external operation, or certain conditions set in the smartphone 10. When the shares are recreated and re-stored, all old shares are deleted from the storage area.

[0040] Furthermore, when the SIM 20 storing the shares is replaced with another smartphone 10 having the same functions as the smartphone 10, the shares may be regenerated in the other smartphone 10. In this case, the acquisition unit 12 of the other smartphone 10 reads the shares from the secure element 20a of the SIM 20. The acquisition unit 12 of the other smartphone 10 also accesses the wallet management server 30 via mobile communication using the SIM 20 and reads the key shares stored in the wallet management server 30. The acquisition unit 12 of the other smartphone 10 generates and acquires a private key from the read shares and key shares. The acquisition unit 12 of the other smartphone 10 generates shares from the acquired private key in the same manner as described above. The storage unit 13 of the other smartphone 10 stores the shares generated by the acquisition unit 12 in the secure element 20a and application storage area 11 of the SIM 20 of the other smartphone 10, and the wallet management server 30.

[0041] By storing the key shares (shares) in the wallet management server 30 in this way, it is possible to regenerate the private key from the key shares and the shares stored in the secure element 20a of the SIM 20. Therefore, as long as there is a SIM 20 in which the shares are stored, it is possible to regenerate the private key and use the crypto asset even if the smartphone 10 is changed as described above, for example, due to a model change.

[0042] In the above description, the acquiring unit 12 acquires a private key and generates and acquires shares. However, the acquiring unit 12 may acquire only shares from an external source without acquiring a private key. For example, the wallet management server 30 acquires a private key for the user of the smartphone 10 and generates shares from the private key in the same manner as described above. The wallet management server 30 transmits the generated shares to the smartphone 10. The acquiring unit 12 receives and acquires the transmitted shares. Note that the device that transmits the shares to the smartphone 10 may be a device other than the wallet management server 30. Furthermore, when shares are generated by the wallet management server 30, the key shares may be stored in the wallet management server 30 without being transmitted to the smartphone 10.

[0043] In the smartphone 10, the private key acquired and generated may not be output in a format that can be recognized by the user. For example, the private key may not be displayed on the smartphone 10. If the user cannot recognize the private key in this way, it is possible to prevent the private key from being leaked intentionally. The above is the function of the smartphone 10 according to this embodiment.

[0044] Next, a process (operation method performed by the smartphone 10), which is a mobile communication terminal according to this embodiment, will be described using the flowcharts of FIGS. 3 and 4. First, a process when shares are stored in a storage area will be described using the flowchart of FIG. 3. For example, this process is performed when a user of the smartphone 10 uses cryptocurrency for the first time. In this process, first, the acquisition unit 12 acquires multiple shares, which are multiple pieces of divided information obtained by dividing a private key, which is confidential information (S01). The multiple shares may be acquired by acquiring a private key and dividing the acquired private key into multiple shares, or by receiving multiple shares from an external device. Next, the storage unit 13 stores the multiple shares in different storage areas (S02). Specifically, one share is stored in the secure element 20a of the SIM 20. Furthermore, one share is stored in the application storage area 11. Furthermore, a key share is stored in the wallet management server 30. This completes the process when shares are stored in a storage area.

[0045] Next, the processing when a private key is used will be explained using the flowchart of FIG. 4. This processing is performed when a crypto asset is used, specifically when a trigger for using the crypto asset is input to the utilization unit 14. In this processing, the utilization unit 14 reads shares related to the crypto asset to be used from the secure element 20a of the SIM 20 and from the application storage area 11 (S11). Next, the utilization unit 14 generates a private key from each of the read shares (S12). Next, the utilization unit 14 uses the generated private key to utilize the crypto asset (S13). Next, the utilization unit 14 discards the private key used to utilize the crypto asset (S14). This completes the processing when a private key is used.

[0046] According to this embodiment, shares can be stored in multiple independent storage areas, namely, the secure element 20a of the SIM 20 and the application storage area 11. Even if one of these multiple shares is stolen, it is not possible to generate a private key. Storing shares in multiple physically isolated environments in this way serves as a countermeasure against hacking and the like. Thus, according to this embodiment, the private key, which is confidential information, can be safely stored.

[0047] Furthermore, although shares are stored in multiple physically isolated environments, distributed management of shares is achieved using a single medium, the smartphone 10. Therefore, in this embodiment, users do not need to have multiple media for managing shares, which prevents management from becoming complicated.

[0048] Note that shares do not necessarily have to be stored as in this embodiment, but may be stored in the SIM 20 and in a storage area on the smartphone other than the SIM 20. Also, in this embodiment, shares are stored in two storage areas on the smartphone 10: the secure element 20a of the SIM 20 and the application storage area 11, but shares may be stored in three or more different storage areas. Also, multiple shares for one private key may be stored in one storage area.

[0049] Furthermore, as in the present embodiment, the shares may be stored in the wallet management server 30, which is a device on a mobile communication network related to mobile communication by the SIM 20. As described above, by using the shares (key shares) of the wallet management server 30, a private key can be generated without using all of the shares stored in the smartphone 10 (including the SIM 20). In this way, the shares of the wallet management server 30 can function as a safety net. Alternatively, a private key can be easily generated when the SIM 20 is replaced with another smartphone. In this way, user convenience can be improved. Note that the device in which the shares are stored may be a device other than the wallet management server 30 as long as it is a device on a mobile communication network related to mobile communication by the SIM 20. Furthermore, the generated shares do not necessarily need to be stored in a device on a mobile communication network related to mobile communication by the SIM 20, and may be stored only in the SIM 20 and in a storage area on a smartphone other than the SIM 20.

[0050] Furthermore, as in this embodiment, the private key generated from the share for use of the crypto asset may be discarded after being used to use the crypto asset. By generating and discarding the private key each time the crypto asset is used in this way, it is possible to prevent the private key from being leaked and to store the private key, which is confidential information, more safely.

[0051] Furthermore, as in the present embodiment, the smartphone 10 may acquire a private key and divide the acquired private key into multiple shares. With this configuration, shares can be generated reliably without being known to others, and the private key, which is confidential information, can be stored more safely. However, shares do not need to be generated on the smartphone 10, and shares may be received and acquired from an external source as described above.

[0052] The block diagrams used to explain the above embodiments show functional blocks. These functional blocks (components) are realized by any combination of at least one of hardware and software. Furthermore, the method for realizing each functional block is not particularly limited. That is, each functional block may be realized using a single device that is physically or logically coupled, or may be realized using two or more physically or logically separated devices that are directly or indirectly connected (for example, using wires, wirelessly, etc.) and these multiple devices. The functional block may also be realized by combining the single device or multiple devices with software.

[0053] Functions include, but are not limited to, judgment, determination, judgment, calculation, computation, processing, derivation, investigation, search, confirmation, reception, transmission, output, access, resolution, selection, election, establishment, comparison, assumption, expectation, consideration, broadcasting, notifying, communicating, forwarding, configuring, reconfiguring, allocation, mapping, and assignment. For example, a functional block (component) that performs transmission is called a transmitting unit or transmitter. As mentioned above, there are no particular limitations on how these functions are implemented.

[0054] For example, the smartphone 10 according to an embodiment of the present disclosure may function as a computer that performs information processing according to the present disclosure. Fig. 5 is a diagram illustrating an example of a hardware configuration of the smartphone 10 according to an embodiment of the present disclosure. The smartphone 10 described above may be physically configured as a computer device including a processor 1001, a memory 1002, a storage 1003, a communication device 1004, an input device 1005, an output device 1006, a bus 1007, and the like. The hardware configurations of the wallet management server 30 and the server 40 may also be as described herein.

[0055] In the following description, the term "apparatus" can be interpreted as a circuit, a device, a unit, etc. The hardware configuration of the smartphone 10 may be configured to include one or more of the apparatuses shown in the drawings, or may be configured to exclude some of the apparatuses.

[0056] Each function of the smartphone 10 is realized by loading specific software (programs) onto hardware such as the processor 1001 and memory 1002, causing the processor 1001 to perform calculations, control communication via the communication device 1004, and control at least one of reading and writing data in the memory 1002 and storage 1003.

[0057] The processor 1001, for example, runs an operating system to control the entire computer. The processor 1001 may be configured by a central processing unit (CPU) including an interface with peripheral devices, a control device, an arithmetic unit, a register, etc. For example, each function of the smartphone 10 described above may be realized by the processor 1001.

[0058] The processor 1001 also reads programs (program codes), software modules, data, etc. from at least one of the storage 1003 and the communication device 1004 into the memory 1002 and executes various processes in accordance with the programs. The programs used are those that cause a computer to execute at least some of the operations described in the above-described embodiments. For example, each function of the smartphone 10 may be implemented by a control program stored in the memory 1002 and running on the processor 1001. While the above-described various processes have been described as being executed by one processor 1001, they may also be executed simultaneously or sequentially by two or more processors 1001. The processor 1001 may be implemented by one or more chips. The programs may also be transmitted from a network via a telecommunications line.

[0059] The memory 1002 is a computer-readable recording medium and may be configured, for example, by at least one of a read-only memory (ROM), an erasable programmable read-only memory (EPROM), an electrically erasable programmable read-only memory (EEPROM), a random access memory (RAM), etc. The memory 1002 may also be called a register, a cache, a main memory (primary storage device), etc. The memory 1002 can store executable programs (program codes), software modules, etc. for performing information processing according to an embodiment of the present disclosure.

[0060] Storage 1003 is a computer-readable recording medium, and may be composed of at least one of, for example, an optical disk such as a CD-ROM (Compact Disc ROM), a hard disk drive, a flexible disk, a magneto-optical disk (e.g., a compact disk, a digital versatile disk, a Blu-ray (registered trademark) disc), a smart card, a flash memory (e.g., a card, a stick, a key drive), a floppy (registered trademark) disk, a magnetic strip, etc. Storage 1003 may also be referred to as an auxiliary storage device. The storage medium included in smartphone 10 may be, for example, a database, a server, or other appropriate medium including at least one of memory 1002 and storage 1003.

[0061] The communication device 1004 is hardware (transmission / reception device) for communicating between computers via at least one of a wired network and a wireless network, and is also called, for example, a network device, a network controller, a network card, or a communication module.

[0062] The input device 1005 is an input device (for example, a keyboard, a mouse, a microphone, a switch, a button, a sensor, etc.) that receives input from the outside. The output device 1006 is an output device (for example, a display, a speaker, an LED lamp, etc.) that outputs to the outside. The input device 1005 and the output device 1006 may be integrated into one device (for example, a touch panel).

[0063] Furthermore, each device, such as the processor 1001 and the memory 1002, is connected by a bus 1007 for communicating information. The bus 1007 may be configured using a single bus, or may be configured using different buses between each device.

[0064] The smartphone 10 may also be configured to include hardware such as a microprocessor, a digital signal processor (DSP), an application specific integrated circuit (ASIC), a programmable logic device (PLD), or a field programmable gate array (FPGA), and some or all of the functional blocks may be realized by the hardware. For example, the processor 1001 may be implemented using at least one of these pieces of hardware.

[0065] Each aspect / embodiment described in the present disclosure may be applied to at least one of systems using LTE (Long Term Evolution), LTE-Advanced (LTE-A), SUPER 3G, IMT-Advanced, 4G (4th generation mobile communication system), 5G (5th generation mobile communication system), FRA (Future Radio Access), NR (New Radio), W-CDMA (registered trademark), GSM (registered trademark), CDMA2000, UMB (Ultra Mobile Broadband), IEEE 802.11 (Wi-Fi (registered trademark)), IEEE 802.16 (WiMAX (registered trademark), IEEE 802.20, UWB (Ultra-Wideband), Bluetooth (registered trademark), or other appropriate systems, and next-generation systems extended based on these. Furthermore, a combination of multiple systems (e.g., a combination of at least one of LTE and LTE-A with 5G, etc.) may also be applied.

[0066] The order of the procedures, sequences, flowcharts, etc. of each aspect / embodiment described in this disclosure may be changed unless it is consistent. For example, the methods described in this disclosure present elements of various steps using an example order, and are not limited to the particular order presented.

[0067] Input and output information may be stored in a specific location (for example, memory) or may be managed using a management table. Input and output information may be overwritten, updated, or added to. Output information may be deleted. Input information may be sent to another device.

[0068] The determination may be made based on a value represented by one bit (0 or 1), a Boolean value (true or false), or a numerical comparison (e.g., comparison with a predetermined value).

[0069] Each aspect / embodiment described in this disclosure may be used alone, in combination, or switched depending on the implementation. Furthermore, notification of predetermined information (e.g., notification that "X is true") is not limited to being done explicitly, but may be done implicitly (e.g., by not notifying the predetermined information).

[0070] Although the present disclosure has been described in detail above, it is clear to those skilled in the art that the present disclosure is not limited to the embodiments described herein. The present disclosure can be implemented in modified and altered forms without departing from the spirit and scope of the present disclosure as defined by the claims. Therefore, the description of the present disclosure is intended to be illustrative and does not have any limiting meaning on the present disclosure.

[0071] Software shall be construed broadly to mean instructions, instruction sets, code, code segments, program code, programs, subprograms, software modules, applications, software applications, software packages, routines, subroutines, objects, executable files, threads of execution, procedures, functions, etc., whether referred to as software, firmware, middleware, microcode, hardware description language, or otherwise.

[0072] Software, instructions, information, etc. may also be transmitted or received over a transmission medium. For example, if software is transmitted from a website, server, or other remote source using wired technologies (such as coaxial cable, fiber optic cable, twisted pair, Digital Subscriber Line (DSL)), and / or wireless technologies (such as infrared, microwave), then these wired and / or wireless technologies are included within the definition of transmission media.

[0073] As used in this disclosure, the terms "system" and "network" are used interchangeably.

[0074] Furthermore, the information, parameters, etc. described in this disclosure may be expressed using absolute values, may be expressed using relative values ​​from a predetermined value, or may be expressed using other corresponding information.

[0075] As used in this disclosure, the terms "determining" and "determining" may encompass a wide variety of actions. "Determining" and "determining" may include, for example, judging, calculating, computing, processing, deriving, investigating, looking up, searching, inquiring (e.g., searching in a table, database, or other data structure), ascertaining, and the like. "Determining" and "determining" may also include receiving (e.g., receiving information), transmitting (e.g., sending information), input, output, accessing (e.g., accessing data in memory), and the like. Furthermore, "judgment" and "decision" can include regarding resolving, selecting, choosing, establishing, comparing, etc. as having been "judged" or "decided." In other words, "judgment" and "decision" can include regarding some action as having been "judged" or "decided." Furthermore, "judgment (decision)" can be interpreted as "assuming," "expecting," "considering," etc.

[0076] The terms "connected," "coupled," or any variation thereof, refer to any direct or indirect connection or coupling between two or more elements, and may include the presence of one or more intermediate elements between two elements that are "connected" or "coupled" to each other. The coupling or connection between elements may be physical, logical, or a combination thereof. For example, "connected" may be read as "access." As used in this disclosure, two elements may be considered to be "connected" or "coupled" to each other using one or more wires, cables, and / or printed electrical connections, as well as electromagnetic energy having wavelengths in the radio frequency range, microwave range, and optical (both visible and invisible) range, as some non-limiting and non-exhaustive examples.

[0077] As used in this disclosure, the phrase "based on" does not mean "based only on," unless expressly stated otherwise. In other words, the phrase "based on" means both "based only on" and "based at least on."

[0078] As used in this disclosure, any reference to an element using a designation such as "first," "second," etc. does not generally limit the quantity or order of those elements. These designations may be used in this disclosure as a convenient method of distinguishing between two or more elements. Thus, a reference to a first and a second element does not imply that only two elements may be employed or that the first element must in some way precede the second element.

[0079] When used in this disclosure, the terms "include," "including," and variations thereof are intended to be inclusive, similar to the term "comprising." Furthermore, when used in this disclosure, the term "or" is not intended to be an exclusive or.

[0080] In this disclosure, where articles are added by translation, such as a, an, and the in English, the disclosure may include that the nouns following these articles are in the plural form.

[0081] In the present disclosure, the term "A and B are different" may mean "A and B are different from each other." The term may also mean "A and B are each different from C." Terms such as "separate" and "coupled" may also be interpreted in the same way as "different."

[0082] The mobile communication terminal of the present disclosure has the following configuration. [1] A mobile communication terminal that can be used to utilize crypto assets and that can be equipped with a subscriber authentication module that stores subscriber information used in mobile communications, an acquisition unit that acquires a plurality of pieces of divided information into which confidential information to be used for utilizing crypto assets and to be kept confidential is divided; a storage unit that stores one of the pieces of divided information acquired by the acquisition unit in the subscriber authentication module and stores one of the pieces of divided information in a storage area of ​​its own terminal other than the subscriber authentication module; a utilization unit that generates secret information from the plurality of pieces of divided information stored in different storage areas by the storage unit and uses the secret information for utilizing the crypto asset; A mobile communication terminal comprising: [2] The mobile communication terminal according to [1], wherein the storage unit stores any of the divided information in a device on a mobile communication network related to mobile communication by the subscriber authentication module. [3] A mobile communication terminal according to [1] or [2], wherein the utilization unit discards the generated confidential information after using it to utilize the cryptocurrency. [4] The mobile communication terminal according to any one of [1] to [3], wherein the acquisition unit acquires secret information by dividing the acquired secret information into a plurality of pieces of divided information. [Explanation of symbols]

[0083] 10...smartphone, 11...application memory area, 12...acquisition unit, 13...memory unit, 14...usage unit, 20...SIM, 20a...secure element, 30...wallet management server, 40...server to which payments are made using crypto assets, 1001...processor, 1002...memory, 1003...storage, 1004...communication device, 1005...input device, 1006...output device, 1007...bus.

Claims

1. A mobile communication terminal that can be equipped with a subscriber authentication module that is used to utilize crypto assets and stores subscriber information used in mobile communication, an acquisition unit that acquires a plurality of pieces of divided information into which confidential information to be used for utilizing crypto assets and to be kept confidential is divided; a storage unit that stores one of the pieces of divided information acquired by the acquisition unit in the subscriber authentication module and stores one of the pieces of divided information in a storage area of ​​its own terminal other than the subscriber authentication module; a utilization unit that generates secret information from the plurality of pieces of divided information stored in different storage areas by the storage unit and uses the secret information for utilizing the crypto asset; A mobile communication terminal comprising:

2. 2. The mobile communication terminal according to claim 1, wherein the storage unit stores any of the pieces of divided information in a device on a mobile communication network related to mobile communication by the subscriber authentication module.

3. The mobile communication terminal according to claim 1 , wherein the utilization unit discards the generated secret information after using it to utilize the crypto-asset.

4. The mobile communication terminal according to claim 1 , wherein the acquisition unit acquires secret information by dividing the acquired secret information into a plurality of pieces of divided information.

Images