English:
[0001] The present invention relates generally to computing devices, and more particularly to methods and apparatus for protecting mobile devices from unauthorized use.
[0002] Recent technological developments have made wireless digital communication more and more commonplace. In addition to the ubiquitous cellular telephone, other personal mobile devices conduct digital communications with a variety of wireless networks. Many models of mobile communication devices employ provisioning data for configuring wireless communications with the provisioning data stored on an individual Subscriber Identity Module (SIM) or similar removable provisioning data memory unit. Provisioning data contains all of the necessary settings and information to enable the mobile device to establish a communication link with a particular cellular telephone or wireless network. When a mobile device is lost or stolen, a user can deactivate their account with their cellular service provider, thereby denying an unauthorized user free cellular service. However, an unauthorized user may simply replace the SIM or similar removable provisioning data memory unit with one of their own to freely use the stolen or lost mobile device. The value of mobile devices and the easy exchangeability of SIMs render mobile devices targets for theft.
[0003] A method for preventing unauthorized use of mobile devices is disclosed. In the various embodiments, a personal mobile device identifier number (MDIN) for a mobile device may be created by an authorized user of a mobile device and stored in the mobile device within a secure memory that is not accessible by users or applications. An identifier (ID) for a removable memory unit, such as a removable provisioning data memory unit or SIM installed at the time the MDIN is created is also stored in the secure memory. Thereafter, when the removable memory unit or SIM is replaced, the mobile device will prompt the user to enter the MDIN before the mobile device will access the new removable memory unit, SIM or similar removable provisioning data memory unit. If the entered MDIN matches the MDIN stored in memory of the mobile device, new removable memory unit, SIM or similar removable provisioning data memory unit is accepted and its ID is recorded in the secure memory. However, if the user enters an incorrect MDIN the mobile device will ignore the removable memory unit, SIM or similar removable provisioning data memory unit and, optionally, may lock device functions rendering the mobile device useless. The MDIN may also be entered by a user as part of a procedure to change the MDIN stored in memory.
[0004] In an embodiment, when a mobile device detects a new SIM or similar removable provisioning data memory unit, it prompts the user to enter the mobile device MDIN. If the entered MDIN matches the mobile device MDIN stored in secure memory the mobile device will access the new removable memory unit, SIM, or similar removable provisioning data memory unit, record the ID of the new removable memory unit, SIM, or similar removable provisioning data memory unit in the secure memory of the mobile device and enable normal operations using the new removable memory unit, SIM or similar removable provisioning data memory unit.
[0005] In an embodiment, if a user decides to change the MDIN assigned to the mobile device, the user may make this election known, such as by activating a menu option. In response, the mobile device may prompt the user for the old MDIN. If the MDIN entered by the user matches the old MDIN stored in the secure memory, the mobile device may allow the user to enter a new MDIN which is then stored in the secure memory. However, if the MDIN entered by the user does not match the old MDIN stored in the secure memory, the mobile device may ignore the request or, optionally, may lock device functions rendering the mobile device useless.
[0007] FIG. 1 is a process flow diagram of an embodiment method for creating a MDIN for a mobile device.
[0008] FIG. 2 is a process flow diagram of an embodiment method for determining if a removable memory unit is new, and if so comparing an entered MDIM to the mobile device MDIN before accessing the removable memory unit.
[0009] FIG. 3 is a process flow diagram of an embodiment method for changing the mobile device MDIN.
[0010] FIG. 4 is a system block diagram of a mobile device suitable for use in an embodiment.
[0011] The various embodiments will be described in detail with reference to the accompanying drawings. Wherever possible, the same reference numbers will be used throughout the drawings to refer to the same or like parts. References made to particular examples and implementations are for illustrative purposes, and are not intended to limit the scope of the invention or the claims.
[0014] Many models of mobile devices require a SIM or similar removable provisioning data memory unit in which is stored the provisioning data that allows the mobile device to perform an important function, such as accessing a service provider's wireless digital communication network. The SIM is a removable memory chip or smart card used in GSM and UMTS mobile devices to store the provisioning data, such as the service-subscriber key used to identify a mobile device to wireless communication networks that enables the mobile device to access a particular communication network. The equivalent of a SIM in UMTS cellular telephone networks is called the Universal Integrated Circuit Card (UICC). CDMA cellular telephones may use an analogous Removable User Identity Module (RUIM). Without a SIM or similar removable provisioning data memory unit (e.g., UICC, RUIM, etc.) the mobile device cannot access a cellular telephone network, and thus may be rendered useless.
[0015] For ease of reference, the terms "removable memory unit" "SIM" and "removable provisioning data memory unit" are used herein to refer generally to any digital memory unit, memory chip or memory card which stores essential information for operating a mobile device, such as though not limited to provisioning data needed to access a cellular communication network. In a preferred embodiment the terms "SIM" and "removable provisioning data memory unit" refer to a removable memory unit, chip or card that stores cellular network provisioning data, such as a Subscriber Identity Module in a GSM mobile device, a Removable User Identity Module (RUIM) in a CDMA mobile device, or a Universal Integrated Circuit Card (UICC) in a UMTS mobile device. Thus, the use of the term "SIM" in the descriptions of the various embodiments is intended as an acronym encompassing all types of removable memory units including removable provisioning data memory units, such as RUIM and UICC units.
[0016] The use of a SIM is mandatory in GSM cellular telephone networks. The provisioning data stored in SIMs includes network specific information used to authenticate and identify subscribers to a network, the most important of which are the ICCID, IMSI, Authentication Key (Ki), and Local Area Identity (LAI). The SIM provisioning data also includes other carrier specific data, such as the SMSC (Short Message Service Centre) number, Service Provider Name (SPN), Service Dialing Numbers (SDN), and Value Added Service (VAS) applications.
[0017] Users can transfer provisioning data among different mobile devices by simply removing the SIM from one mobile device and inserting it into another. A typical low cost SIM has a small memory, 2-3 KB, which may only be enough to contain provisioning data and perhaps a personal phone directory. The provisioning data stored in a SIM is used by the mobile device directly. SIMs with additional applications are available in many storage sizes, the largest being capable of storing up to 1 gigabyte of information. Smaller sized SIMs, capable of storing up to 32 KB or 16 KB, are the most prevalent in areas with less-developed GSM networks.
[0018] While the portability of SIMs makes them useful for distributing provisioning data to mobile devices, their use is not without disadvantage. For example, because the SIM may be inserted into any mobile device, if the SIM is itself stolen or a mobile device containing the SIM is lost or stolen, others may utilize the information stored in the SIM to use the mobile device, such as to place cellular telephone calls, without authorization from the rightful owner. Most mobile device owners know to inform their service contract provider if their mobile device is lost or stolen in order to prevent others from using it at their expense. However, such prompt termination of cellular services alone is not sufficient to deter the theft of mobile devices, because the mobile device may still be used by simply inserting a new SIM. Thus, the theft of mobile devices remains a frequent crime in many parts of the world.
[0019] To help deter the theft of mobile devices, the various embodiments allow the user to create a personal mobile device identification number (MDIN) which must be entered before the mobile device can access a new SIM. For ease of description, the term "MDIN" is used herein as a short hand to refer to a secret code or number that a user enters into a mobile device as part of the various embodiments. The MDIN may be any code or number selected by users and need not identify a person. Thus, the term MDIN is not intended to limit the various embodiments to an identifier assigned to the mobile device by a manufacturer, such as a serial number of MAC ID. When a mobile device is activated it may check an ID associated with the installed SUM to determine if the SIM has been changed. If the mobile device determines that a new SIM has been inserted, it may prompt the user to enter the MDIN for the mobile device. If the entry made by the user matches the MDIN stored in secure memory, the mobile device will access the SIM and function normally. However, if the entry by the user does not match the MDIN stored in memory (e.g., after a number of attempts to enter the MDIN), the mobile device may not access the SIM, thereby denying use of the mobile device. In this manner, lost or stolen mobile devices cannot be misappropriated by replacing the SIM without knowing the MDINs associated with the device. By removing the economic value of lost or stolen mobile devices the various embodiments may help to deter the theft of mobile devices. Also, since a found mobile device is useless to the finder, the various embodiments may provide incentives to return found mobile devices to the rightful owners.
[0020] In overview, the various embodiments provide methods and devices for preventing unauthorized use of a memory unit with a computing device by requiring entry of a MDIN when a new memory unit is detected. In a preferred embodiment, the methods and devices prevent unauthorized use of a mobile device by requiring entry of a MDIN before the mobile device will access a newly inserted SIM. The mobile device includes a processor configured to allow a user to enter a MDIN that is stored in secure memory which cannot be accessed by users or applications. The mobile device processor is configured to recognize when a new SIM has been inserted. If a new SIM is detected, the mobile device processor may require the user to enter the correct MDIN before it will access the new SIM and resume normal mobile device functions. If the user fails to enter the correct MDIN the mobile device processor may not access the new SIM, and thus deny the functionality enabled by provisioning data stored in the SIM. In an optional embodiment, the mobile device may also respond to incorrect MDIN entries by locking some or all of the functions of the mobile device, thereby rendering the mobile device useless. In an embodiment, the mobile device may allow users to change the MDIN. In this embodiment, upon receiving a request to change the MDIN, the mobile device may prompt the user to enter the old MDIN. If the MDIN entered by the user matches the MDIN stored in secure memory, the mobile device may prompt the user to create a new MDIN which is stored in secure memory in place of the old MDIN. Thus, only a user that knows the old MDIN is allowed to make any changes to the MDIN.
[0021] Mobile devices may be configured by the manufacturer or distributor with a default MDIN, such as a string of zeros. When a user purchases a new mobile device from a manufacturer, distributer or service provider, the user may be required to enter a new MDIN into the mobile device. For example, when a user purchases a new mobile device, as part of the mobile device set-up, the salesperson or service technician may require the user to create a MDIN as part of configuring the device for use. As another example, the mobile device may be configured to detect when a MDIN has not been created and to prompt the user to enter a new MDIN before beginning normal operations. In this embodiment, the mobile device may be configured by the OEM with now MDIN or a default MDIN, such as "00000" or "01234" which may be provided to the user in the user manual, for example. Upon activation, the mobile device may check the MDIN stored in secure memory to determine if there is a stored MDIN or if the stored MDIN is the default. If no MDIN or the default MDIN is stored in memory, the mobile device may prompt the user to create a new personalized MDIN. This personalized MDIN may then be stored in secure memory for use in the future when a new SIM is detected to allow the mobile device to access the new SIM.
[0022] FIG. 1 is a process flow diagram of an embodiment method for requesting, receiving and storing a MDIN created by a user as may be implemented upon activation of a new mobile device. When a mobile device is turned on, step 100, the mobile device processor may be configured by software instructions to check the MDIN stored within secure memory as part of the boot-up processes and before accessing the provisioning data stored on a SIM, step 102. The processor may determine whether there is a MDIN stored in memory or if the stored MDIN is equal to a default value, determination 104. If there is no MDIN or the MDIN equals the default value (i.e., determination 104 = "YES"), such as may be the case in a new mobile device, the mobile device processor may generate a display instructing the user on setting a new MDIN, optional step 106, before accessing the SIM. For example, in an embodiment one instruction may be to enter the default MDIN provided by the manufacturer in the mobile device to begin the MDIN generation process. This option is not shown FIG. 1, but would be similar to the process described below with reference to step 302 in FIG. 3. The instructions may also explain the purpose of the MDIN and the importance of storing the MDIN in a secure location for future use. The mobile device may then prompt the user to enter a new MDIN, step 108. As part of this step the processor receives the MDIN entry and stores it in temporary memory. Once the MDIN is entered, the mobile device may prompt the user to enter the new MDIN a second time, step 110. The processor may then determine whether the first and second MDIN entries match, determination 112. Requiring two entries of the same MDIN and checking to see whether the two entries is a well known step for ensuring that the user properly entered the MDIN, and thus that the MDIN stored in memory is the same as the MDIN the user meant to input. If the first and second MDIN entries do not match (i.e., determination 112 = "NO"), the process may prompt the user to repeat the double entry process by returning to step 108. If the first and second MDIN entries match (i.e., determination 112 = "YES"), the received MDIN may be stored in the secure memory of the mobile device, step 114. Once the MDIN has been entered and stored in secure memory, the mobile device processor may access the SIM installed in the mobile device to obtain the identifier assigned to the SIM ("SIM ID") by the manufacturer, service provider or owner of the provisioning data, step 201. The processor may then copy the SIM ID to secure memory of the mobile device, step 211. Recording the SIM ID in the secure memory of the mobile device allows the mobile device processor to recognize when the SIM has been replaced as explained below with reference to FIG. 2. At this point, the mobile device may proceed with initial configuration processors or begin normal operation, step 204.
[0023] If there is a MDIN stored in memory and the MDIN is not the default value (i.e., determination 104 = "NO"), this indicates that the mobile device has been configured by the owner. In this case, which will be the case in all power-ups after the initial configuration, the mobile device processor may proceed with normal boot- up operations which may include the embodiment method illustrated in FIG. 2.
[0024] The process flow in FIG. 2 illustrates an embodiment method for determining whether the installed SIM is new, and if so, for enabling the processor to access the new SIM only if the user enters the proper MDIN. As part of the mobile device boot- up processes, which may include those described above with reference to FIG. 1, step 200, the processor may access the SIM to obtain the SIM ID, step 201, and compare this value against the SIM ID stored in the secure memory of the mobile device, step 202, to determine if the two values match, determination 203. If the processor determines that the SIM ID matches the SIM ID stored in secure memory (i.e., determination 203 = "YES"), the processor may be allowed to access the provisioning data of the SIM and proceed with normal functioning of the mobile device, step 204.
[0025] If the SIM ID does not match the SIM ID recorded in the secure memory (i.e., determination 203 = "NO"), this indicates that a new SIM has been inserted into the mobile device. Such a scenario may occur when, for example, the user switches cellular service providers by removing the old SIM inserting a new SIM containing the provisioning data for the new service provider. When this condition is determined the processor may generate a display (and optionally generate a warning sound) that prompts the user to enter the mobile device MDIN, step 206. The mobile device processor may also generate a display explaining that the mobile device will not access the new SIM until the proper MDIN is entered. The processor receives the
[0026] In an embodiment the new SIM ID is stored in memory without replacing the old SIM ID, thereby allowing users to frequently switch between two or more SIMs without requiring entry of the MDIN each time. In an alternative embodiment the new SIM ID is stored in the same location in secure memory as the old SIM ID. In this alternative embodiment each time the SIM is replaced the processor performs the operations of prompting entry of the MDIN, comparing the entered value to the MDIN in secure memory and recording the new SIM ID in secure memory, steps 206-211 , thereby replacing the old SIM ID. In a further embodiment the processor may be configured to permit the user to activate a setting which determines whether multiple SIM IDs are stored in secure memory (enabling swapping without MDIN entry) or only one SIM ID is stored in secure memory (requiring MDIN entry every time the SIM is changed out).
[0027] If the MDIN entered by the user does not match the MDIN stored in secure memory (i.e., determination 210 = "NO"), the processor will not access the new SIM. In an optional embodiment the processor may permit the user a limited number of retries, such as by incrementing a counter of the number of times a MDIN is entered, step 212. The processor may determine whether the incremented count of MDIN entries exceeds a predetermined limit (e.g., five, ten or more), determination 214. If the count of MDIN entries is less than the limit (i.e., determination 214 = "NO"), the processor may prompt the user to reenter the MDIN, returning to step 206. If the count of MDIN entries exceeds the limit (i.e., determination 214 = "YES"), the processor may be configured to lock the mobile device in some manner to prevent further use, optional step 216.
[0028] While the embodiment method illustrated in FIG. 2 compares the SIM ID to a value stored in secure memory, one of skill in the art would appreciate that other methods may be used to register SIMs with a mobile device and detect new SIMs. For example, the processor may be configured to generate a unique number (e.g., a HASH value) from the combination of the SIM ID and the MDIN which is compared to a value stored in secure memory. As another example, the processor may compute a unique number using an encryption-type algorithm operating on the MDIN and SIM ID and compare that value to a value saved on the SIM. In this alternative, when a new SIM is registered with the mobile device by the user entering the correct MDIN, the unique number may be calculated and stored on the SIM. If the encryption algorithm is not reversible, this embodiment may not be spoofed because an unauthorized user without knowledge of the MDIN cannot store a correct number on the SIM. This embodiment has the advantage of enabling users to register any number of SIMs with their mobile devices by inserting them into the devices and entering their MDIN one time. After each SIM has been registered the mobile device processor will be able to recognize the SIM and proceed with normal operations, step 204, without requiring entry of the MDIN.
[0029] In an embodiment, the processor may be configured to enable a user to change the MDIN assigned to a mobile device. This may be desired when a MDIN is compromised or when a mobile device is sold and the old user wants to keep his/her MDIN secret or the new user wishes to enter a MDIN that is personal and memorable. An example method for enabling a MDIN change is illustrated in process flow shown in FIG. 3.
[0030] Referring to FIG. 3, the mobile device processor may be configured to receive a request from the user to change the MDIN, step 300. This request may be communicated by a button press or a user selection of a configuration menu option. For example, to change the MDIN a user may access a user interface menu, such as in the Settings menu, and select a menu option for changing the MDIN. Upon receipt of a request to change the MDIN, the processor may prompt the user to enter the current (soon to be old) MDIN, step 302. Requesting entry of the current MDIN verifies that an authorized user is attempting to change the MDIN. The processor compares the entered MDIN against the MDIN stored in the secure memory, step 303, to determine whether the two values match, determination 304. If the entered MDIN does not matches the MDIN stored in secure memory (i.e., determination 304 = "NO"), the processor may simply disallow a MDIN change, step 306. Optionally, in a manner similar to that described above with reference to FIG. 2, the processor may allow a limited number of user attempts to change the MDIN, and if the number of attempts exceeds a limit, the processor may lock the mobile device to disallow any further use (not shown).
[0031] If the user entered the correct MDIN (i.e., determination 304 = "YES"), the processor may allow a MDIN change to proceed by prompting the user to enter a new MDIN, step 108. As described above with reference to FIG. 1, the processor may prompt the user for a second MDIN entry, step 110, and compare the two entered values to determine if they match, determination 112. If the two MDIN entries do not match (i.e., determination 112 = "NO"), the processor may prompt the user to repeat the double entry process by returning to step 108. If the first and second MDIN entries match (i.e., determination 112 = "YES"), the received new MDIN may be stored in the secure memory of the mobile device thereby replacing the old MDIN, step 114. Once the MDIN has been entered and stored in secure memory, the mobile device processor may return to normal operation, step 204.
[0032] Typical mobile devices suitable for use with the various embodiments will have in common the components illustrated in FIG. 4. For example, the exemplary mobile device 400 may include a processor 191 coupled to internal memory 192, a display 193 and to a SIM 199 or similar removable memory unit. Additionally, the mobile device 400 may have an antenna 194 for sending and receiving electromagnetic radiation that is connected to a wireless data link and/or cellular telephone transceiver 195 coupled to the processor 191. In some implementations, the transceiver 195 and portions of the processor 191 and memory 192 used for cellular telephone communications are collectively referred to as the air interface since it provides a data interface via a wireless data link. Mobile devices typically also include a key pad 196 or miniature keyboard and menu selection buttons or rocker switches 197 for receiving user inputs.
[0033] The processor 191 may be any programmable microprocessor, microcomputer or multiple processor chip or chips that can be configured by software instructions (applications) to perform a variety of functions, including the functions of the various embodiments described herein. In some mobile devices, multiple processors 191 may be provided, such as one processor dedicated to wireless communication functions and one processor dedicated to running other applications. Typically, software applications may be stored in the internal memory 192 before they are accessed and loaded into the processor 191. In some mobile devices, the processor 191 may include internal memory sufficient to store the application software instructions. The internal memory of the processor may include a secure memory 198 which is not directly accessible by users or applications and that is capable of recording MDINs and SIM IDs as described in the various embodiments. As part of the processor, such a secure memory 198 may not be replaced or accessed without damaging or replacing the processor. In some mobile devices, additional memory chips (e.g., a Secure Data (SD) card) may be plugged into the device 400 and coupled to the processor 191. In many mobile devices, the internal memory 192 may be a volatile or nonvolatile memory, such as flash memory, or a mixture of both. For the purposes of this description, a general reference to memory refers to all memory accessible by the processor 191, including internal memory 192, removable memory plugged into the mobile device, and memory within the processor 191 itself, including the secure memory 198.
[0034] The foregoing method descriptions and the process flow diagrams are provided merely as illustrative examples and are not intended to require or imply that the steps of the various embodiments must be performed in the order presented. As will be appreciated by one of skill in the art the order of steps in the foregoing embodiments may be performed in any order. Further, words such as "thereafter," "then," "next," etc. are not intended to limit the order of the steps; these words are simply used to guide the reader through the description of the methods.
[0035] The various illustrative logical blocks, modules, circuits, and algorithm steps described in connection with the embodiments disclosed herein may be implemented as electronic hardware, computer software, or combinations of both. To clearly illustrate this interchangeability of hardware and software, various illustrative components, blocks, modules, circuits, and steps have been described above generally in terms of their functionality. Whether such functionality is implemented as hardware or software depends upon the particular application and design constraints imposed on the overall system. Skilled artisans may implement the described functionality in varying ways for each particular application, but such implementation decisions should not be interpreted as causing a departure from the scope of the present invention.
[0036] The hardware used to implement the various illustrative logics, logical blocks, modules, and circuits described in connection with the aspects disclosed herein may be implemented or performed with a general purpose processor, a digital signal processor (DSP), an application specific integrated circuit (ASIC), a field programmable gate array (FPGA) or other programmable logic device, discrete gate or transistor logic, discrete hardware components, or any combination thereof designed to perform the functions described herein. A general-purpose processor may be a microprocessor, but, in the alternative, the processor may be any conventional processor, controller, microcontroller, or state machine. A processor may also be implemented as a combination of computing devices, e.g., a combination of a DSP and a microprocessor, a plurality of microprocessors, one or more microprocessors in conjunction with a DSP core, or any other such configuration. Alternatively, some steps or methods may be performed by circuitry that is specific to a given function.
[0037] In one or more exemplary aspects, the functions described may be implemented in hardware, software, firmware, or any combination thereof. If implemented in software, the functions may be stored on or transmitted over as one or more instructions or code on a computer-readable medium. The steps of a method or algorithm disclosed herein may be embodied in a processor-executable software module executed which may reside on a computer-readable medium. Computer- readable media includes both computer storage media and communication media including any medium that facilitates transfer of a computer program from one place to another. A storage media may be any available media that may be accessed by a computer. By way of example, and not limitation, such computer-readable media may comprise RAM, ROM, EEPROM, CD-ROM or other optical disk storage, magnetic disk storage or other magnetic storage devices, or any other medium that may be used to carry or store desired program code in the form of instructions or data structures and that may be accessed by a computer. Also, any connection is properly termed a computer-readable medium. For example, if the software is transmitted from a website, server, or other remote source using a coaxial cable, fiber optic cable, twisted pair, digital subscriber line (DSL), or wireless technologies such as infrared, radio, and microwave, then the coaxial cable, fiber optic cable, twisted pair, DSL, or wireless technologies such as infrared, radio, and microwave are included in the definition of medium. Disk and disc, as used herein, includes compact disc (CD), laser disc, optical disc, digital versatile disc (DVD), floppy disk, and blu-ray disc where disks usually reproduce data magnetically, while discs reproduce data optically with lasers. Combinations of the above should also be included within the scope of computer-readable media. Additionally, the operations of a method or algorithm may reside as one or any combination or set of codes and/or instructions on a machine readable medium and/or computer-readable medium, which may be incorporated into a computer program product.
[0038] The preceding description of the disclosed embodiments is provided to enable any person skilled in the art to make or use the present invention. Various modifications to these embodiments will be readily apparent to those skilled in the art, and the generic principles defined herein may be applied to other embodiments without departing from the spirit or scope of the invention. Thus, the present invention is not intended to be limited to the embodiments shown herein but is to be accorded the widest scope consistent with the following claims and the principles and novel features disclosed herein.

中文:
[0001]本发明大体上涉及计算装置,且更特定来说,涉及用于保护移动装置免遭未授权使用的方法和设备。
[0002]最近的技术上的发展已使无线数字通信越来越司空见惯。除了随处可见的蜂窝式电话之外,其它个人移动装置与各式各样的无线网络进行数字通信。许多型号的移动通信装置采用供应数据以使用存储于个别的订户身份模块(SIM)或类似的可移除供应数据存储器单元上的供应数据来配置无线通信。供应数据含有使移动装置能够建立与特定的蜂窝式电话或无线网络的通信链路的所有必要的设定和信息。当移动装置丢失或被盗,用户可用其蜂窝式服务提供者去活他们的帐户,从而未授权的用户释放蜂窝式服务。然而,未授权的用户可简单地用其自身的SIM或类似的可移除供应数据存储器单元中的一者来更换SIM或类似的可移除供应数据存储器单元以自由地使用被盗或丢失的移动装置。移动装置的价值以及SIM的简易互换性使得移动装置成为盗窃的目标。
[0003]本发明揭示一种用于防止对移动装置的未授权使用的方法。在各种实施例中,用于移动装置的个人移动装置识别符编号(MDIN)可由移动装置的经授权用户产生并存储于移动装置中的不可由用户或应用存取的安全存储器内。在安装MDIN时产生的用于可移除存储器单元(例如,可移除供应数据存储器单元或SIM)的识别符(ID)也存储于安全存储器中。其后,当更换可移除存储器单元或SIM时,移动装置将在移动装置存取新的可移除存储器单元、SIM或类似的可移除供应数据存储器单元时提示用户输入MDIN。如果所输入的MDIN与存储于移动装置的存储器中的MDIN匹配,则新的可移除存储器单元、SIM或类似的可移除供应数据存储器单元被接受且其ID记录于安全存储器中。然而,如果用户输入不正确的MDIN,则移动装置将忽略所述可移除存储器单元、SIM或类似的可移除供应数据存储器单元,且可任选地锁定装置功能,从而使移动装置不可用。MDIN也可由用户输入以作为改变存储于存储器中的MDIN的程序的部分。
[0004]在一实施例中,当移动装置检测到新的SIM或类似的可移除供应数据存储器单元时,其提示用户输入移动装置MDIN。如果所输入的MDIN与存储于安全存储器中的移动装置MDIN匹配,则移动装置将存取新的可移除存储器单元、SIM或类似的可移除供应数据存储器单元,将所述新的可移除存储器单元、SIM或类似的可移除供应数据存储器单元的ID存储于移动装置的安全存储器中,且使用新的可移除存储器单元、SIM或类似的可移除供应数据存储器单元来启用正常操作。
[0005]在一实施例中,如果用户决定改变指派给移动装置的MDIN,则用户可例如通过激活菜单选项而使此选择已知。作为响应,移动装置可提示用户输入旧MDIN。如果用户输入的MDIN与存储于安全存储器中的旧MDIN匹配,则移动装置可允许用户输入新MDIN,所述新MDIN随后存储于安全存储器中。然而,如果用户输入的MDIN与存储于安全存储器中的旧MDIN不匹配,则移动装置可忽略请求或可任选地锁定装置功能而使移动装置不可用。
[0007]图1是用于产生移动装置的MDIN的实施例方法的过程流程图。
[0008]图2是用于确定可移除存储器单元是否为新的,且在是新的情况下在存取可移除存储器单元之前将所输入的MDIM与移动装置MDIN进行比较的实施例方法的过程流程图。
[0009]图3是用于改变移动装置MDIN的实施例方法的过程流程图。
[0010]图4是适合用于一实施例中的移动装置的系统框图。
[0011]将参看附图详细描述各种实施例。只要可能,将在整个图式中使用相同的参考标号来指代相同或相似的部分。对具体实例和实施方案做出的参考是出于说明性目的,且不希望限制本发明或权利要求书的范围。
[0014]许多型号的移动装置需要其中存储有供应数据的SIM或类似的可移除供应数据存储器单元,所述供应数据允许移动装置执行重要功能,例如接入服务提供者的无线数字通信网络。SIM卡是在GSM和UMTS移动装置中使用的用以存储供应数据的可移除存储器芯片或智能卡,所述供应数据例如为服务订户密钥,其用于向无线通信网络识别移动装置,其使得所述移动装置能够接入特定通信网络。SIM在UMTS蜂窝式电话网络中的等效物被称为通用集成电路卡(UICC)。CDMA蜂窝式电话可使用模拟的可移除用户身份模块(RUIM)。在不具有SIM或类似的可移除供应数据存储器单元(例如,UICC、RUIM等)的情况下,移动装置无法接入蜂窝式电话网络,且因此可变得不可用。
[0015]为了易于参考,在本文中使用术语“可移除存储器单元”、“SIM”和“可移除供应数据存储器单元”来大体上指代存储用于操作移动装置的基本信息(例如(但不限于)接入蜂窝式通信网络所需的供应数据)的任何数字存储器单元、存储器芯片或存储器卡。在优选实施例中,术语“SIM”和“可移除供应数据存储器单元”指代存储蜂窝式网络供应数据的可移除存储器单元、芯片或卡,例如GSM移动装置中的订户身份模块、CDMA移动装置中的可移除用户身份模块(RUIM),或UMTS移动装置中的通用集成电路卡(UICC)。因此,在各种实施例的描述中使用术语“SIM”意欲作为涵盖所有类型的可移除存储器单元(包含例如RUIM和UICC单元等可移除供应数据存储器单元)的首字母缩写词。
[0016]在GSM蜂窝式电话网络中使用SIM卡是强制性的。存储于SIM中的供应数据包含用于认证并识别网络订户的网络专有信息,其中最重要的是ICCID、IMSI、认证密钥(Ki)和本地区域身份(LAI)。SIM供应数据还包含其它运营商专有数据,例如SMSC(短消息服务中心)号码、服务提供者名称(SPN)、服务拨打号码(SDN)和增值服务(VAS)应用。
[0017]用户可通过简单地从一个移动装置移除SIM并将其插入到另一移动装置中而在不同的移动装置间转移供应数据。典型的低成本SIM具有2-3KB的小存储器,其仅可足以含有供应数据和可能的个人电话号码簿。存储于SIM中的供应数据由移动装置直接使用。具有额外应用的SIM以许多存储大小可用,最大的能够存储多达1千兆字节的信息。能够存储多达32KB或16KB的较小尺寸的SIM在具有较不发达的GSM网络的区域中最为流行。
[0018]虽然SIM的便携性使其可用于将供应数据分布到移动装置,但其使用并非没有缺点。举例来说,因为SIM可插入到任何移动装置中,所以在SIM本身被盗或含有SIM的移动装置丢失或被盗的情况下,其他人可利用存储于SIM中的信息在没有来自合法所有者的授权的情况下使用移动装置,例如发出蜂窝式电话呼叫。大多数移动装置所有者知道在其移动装置丢失或被盗的情况下告知其服务契约提供者,以便防止在所有者付费的情况下让其他人使用所述移动装置。然而,仅对移动装置的此迅速终止不足以阻止移动装置的被盗,因为仍可通过简单地插入新的SIM来使用移动装置。因此,移动装置的被盗在世界许多地方仍然是频发的犯罪。
[0019]为了帮助阻止移动装置被盗,各种实施例允许用户产生个人移动装置识别号(MDIN),在移动装置可存取新SIM之前必须输入所述MDIN。为了易于描述,在本文中使用术语“MDIN”作为简写来指代用户输入到移动装置中作为各种实施例的部分的保密码或保密编号。MDIN可为由用户选择的任何代码或编号,且无需识别人。因此,术语MDIN无意将各种实施例限于由制造商指派给移动装置的识别符(例如,MAC ID序列号)。当移动装置被激活时,其可检查与所安装的SUM相关联的ID来确定SIM是否已改变。如果移动装置确定已插入新SIM,则其可提示用户输入移动装置的MDIN。如果用户作出的输入与存储于安全存储器中的MDIN匹配,则移动装置将存取SIM且正常运作。然而,如果用户的输入与存储于存储器中的MDIN不匹配(例如,在输入MDIN的若干次尝试后),则移动装置不可存取SIM,进而拒绝对移动装置的使用。以此方式,在不知道与装置相关联的MDIN的情况下无法通过更换SIM来盗用丢失或被盗的移动装置。通过消除丢失或被盗移动装置的经济价值,各种实施例可帮助阻止对移动装置的盗窃。而且,由于发现者无法使用所发现的移动装置,所以各种实施例可提供将所发现的移动装置返回给合法所有者的动机。
[0020]总的来说,各种实施例提供用于通过在检测到新存储器单元时要求输入MDIN来防止用计算装置对存储器单元的未授权使用的方法和装置。在优选实施例中,所述方法和装置通过在移动装置将存取新插入的SIM之前要求输入MDIN来防止对移动装置的未授权使用。移动装置包含处理器,所述处理器经配置以允许用户输入存储于无法由用户或应用存取的安全存储器中的MDIN。所述移动装置处理器经配置以辨识出何时已插入新SIM。如果检测到新SIM,则所述移动装置处理器可在其将存取新SIM并恢复正常的移动装置功能之前要求用户输入正确的MDIN。如果用户无法输入正确的MDIN,则移动装置处理器不可存取新SIM,且因此拒绝由存储于SIM中的供应数据启用的功能性。在任选的实施例中,所述移动装置还可通过锁定移动装置的功能中的一些或全部而响应于不正确的MDIN输入,进而使移动装置不可用.在一实施例中,移动装置可允许用户改变MDIN。在此实施例中,在接收到改变MDIN的请求后,移动装置可即刻提示用户输入旧MDIN。如果用户所输入的MDIN与存储于安全存储器中的MDIN匹配,则移动装置可提示用户产生新MDIN,所述新MDIN存储于安全存储器中来取代旧MDIN。因此,仅知道旧MDIN的用户被允许对MDIN作出任何改变。
[0021]移动装置可由制造商或经销商用默认的MDIN(例如,零字符串)配置。当用户从制造商、经销商或服务提供者购买新移动装置时,可要求用户将新MDIN输入到移动装置中。举例来说,当用户购买新移动装置时,作为移动装置设置的部分,销售员或服务技术员可要求用户产生MDIN以作为配置装置进行使用的部分。作为另一实例,移动装置可经配置以在尚未产生MDIN时进行检测且提示用户在开始正常操作之前输入新MDIN。在此实施例中,移动装置可由OEM用现在的MDIN或默认的MDIN(例如,“00000”或“01234”,其例如可在用户手册中提供给用户)配置。在激活后,移动装置可即刻检查存储于安全存储器中的MDIN以确定是否存在所存储的MDIN或所存储的MDIN是否为默认的。如果没有MDIN或默认的MDIN存储于存储器中,则移动装置可提示用户产生新的个人化的MDIN。此个人化的MDIN可随后存储于安全存储器中以供将来在检测到新SIM时使用,以允许移动装置存取新SIM。
[0022]图1是如可在激活新移动装置后即刻实施的用于请求、接收并存储由用户产生的MDIN的实施例方法的过程流程图。当开启移动装置时(步骤100),移动装置处理器可由软件指令配置以作为启动过程的部分且在存取存储于SIM上的供应数据之前检查存储于安全存储器内的MDIN(步骤102)。处理器可确定是否存在存储于存储器中的MDIN或所存储的MDIN是否等于默认值(确定104)。如果无MDIN或MDIN等于默认值(即,确定104=“是”)(例如,可为新移动装置中的情况),则移动装置处理器可在存取SIM之前产生指令用户设定新MDIN的显示(任选步骤106)。举例来说,在一实施例中,一个指令可为在移动装置中输入由制造商提供的默认MDIN以开始MDIN产生过程。此选项未在图1中展示,但将类似于下文参考图3中的步骤302描述的过程。所述指令还可阐释MDIN的目的和将MDIN存储在安全位置中以供将来使用的重要性。移动装置可随后提示用户输入新MDIN(步骤108)。作为此步骤的部分,处理器接收MDIN输入且将其存储在临时存储器中。一旦输入MDIN,移动装置可提示用户第二次输入新MDIN(步骤110)。处理器可确定第一和第二MDIN输入是否匹配(确定112)。要求同一MDIN的两次输入以及检查是否为两次输入是用于确保用户适当地输入MDIN且因此存储于存储器中的MDIN与用户打算输入的MDIN相同的众所周知的步骤。如果第一和第二MDIN输入不匹配(即,确定112=“否”),则所述过程可通过返回到步骤108而提示用户重复两次输入过程。如果第一和第二MDIN输入匹配(即,确定112=“是”),则所接收的MDIN可存储于移动装置的安全存储器中(步骤114)。一旦MDIN已输入且存储于安全存储器中,移动装置处理器便可存取安装于移动装置中的SIM以获得由制造商、供应数据的服务提供者或所有者指派给SIM的识别符(“SIM ID”)(步骤201)。处理器可随后将SIM ID复制到移动装置的安全存储器(步骤211)。将SIM ID记录于移动装置的安全存储器中允许移动装置处理器辨识出SIM何时已被更换,如下文参考图2所阐释。此时,移动装置可继续进行初始配置处理器或开始正常操作(步骤204)。
[0023]如果存在存储于存储器中的MDIN,且MDIN不是默认值(即,确定104=“否”),则这指示移动装置已由所有者配置。在此情况下(其将为所有在初始配置后加电的情况),移动装置处理器可继续进行正常的启动操作,其可包含图2中所说明的实施例方法。
[0024]图2中的过程流说明一实施例方法,其用于确定所安装的SIM是否为新的,且如果是新的,则仅在用户输入适当的MDIN的情况下使处理器能够存取新SIM。作为移动装置启动过程的部分(其可包含上文参考图1所描述的部分,步骤200),处理器可存取SIM以获得SIM ID(步骤201),且将此值与存储于移动装置的安全存储器中的SIM ID进行比较(步骤202),以确定两个值是否匹配(确定203)。如果处理器确定所述SIM ID与存储于安全存储器中的SIM ID匹配(即,确定203=“是”),则可允许处理器存取SIM的供应数据并继续进行移动装置的正常运作(步骤204)。
[0025]如果SIM ID与记录于安全存储器中的SIM ID不匹配(即,确定203=“否”),则这指示已将新SIM插入到移动装置中。当例如用户通过插入含有用于新服务提供者的供应数据的新SIM来移除旧SIM而切换蜂窝式服务提供者时,可发生此情形。当确定此条件时,处理器可产生提示用户输入移动装置MDIN的显示(以及任选地产生警告声音)(步骤206)。移动装置处理器还可产生阐释在输入适当的MDIN之前移动装置将不存取新SIM的显示。处理器接收MDIN输入且将所输入的值与存储于安全存储器中的MDIN进行比较(步骤208),以确定所述值是否匹配(即,所输入的MDIN是否正确)(确定210)。如果所输入的值与存储于安全存储器中的MDIN匹配(即,确定210=“是”),则处理器可将SIM ID记录于安全存储器中(步骤211)。一旦新的SIM ID存储于存储器中,移动装置处理器便可开始正常操作(步骤204)。
[0026]在一实施例中,在不更换旧SIM ID的情况下将新SIM ID存储于存储器中,进而允许用户在两个或两个以上SIM之间频繁切换,而不要求每次输入MDIN。在一实施例中,新SIM ID存储在安全存储器中的与旧SIM ID相同的位置中。在此替代性实施例中,每次更换SIM时,处理器可执行以下操作:提示输入MDIN;将所输入的值与存储于安全存储器中的MDIN进行比较;以及将新SIM ID记录于安全存储器中(步骤206-211),进而更换旧SIM ID。在进一步实施例中,处理器可经配置以准许用户激活一设定,所述设定确定是否多个SIM ID存储于安全存储器中(从而在无MDIN输入的情况下启用交换)或是否仅一个SIM ID存储于安全存储器中(每次换出SIM时要求MDIN输入)。
[0027]如果用户输入的MDIN与存储于安全存储器中的MDIN不匹配(即,确定210=“否”),则处理器将不存取新SIM。在任选的实施例中,处理器可例如通过递增输入MDIN的次数的计数器而准许用户有限数目的输入(步骤212)。处理器可确定MDIN输入的递增计数是否超过预定限值(例如,五、十或更大)(确定214)。如果MDIN输入的计数小于限值(即,确定214=“否”),则处理器可提示用户再次输入MDIN,返回到步骤(206)。如果MDIN输入的计数超过限值(即,确定214=“是”),则处理器可经配置而以某一方式锁定移动装置以防止进一步使用(任选的步骤216)。
[0028]虽然图2中所说明的实施例方法将SIM ID与存储于安全存储器中的值进行比较,但所属领域的技术人员将了解,其它方法可用于向移动装置注册SIM并检测新SIM。举例来说,处理器可经配置以从SIM ID与MDIN的组合产生唯一数字(例如,HASH值),其与存储于安全存储器中的值进行比较。作为另一实例,处理器可使用对MDIN和SIMID进行运算的加密型算法来计算唯一数字,且将所述值与保存于SIM上的值进行比较。在此替代方案中,当通过用户输入正确的MDIN来向移动装置注册新SIM时,唯一数字可经计算并存储于SIM上。如果加密算法不可逆,则此实施例可能不会被诈骗,因为不知道MDIN的未授权用户无法将正确的数字存储于SIM上。此实施例具有以下优点:使用户能够通过将SIM插入到装置中并输入其MDIN一次便能够向其移动装置注册任何数字的SIM。在已注册每一SIM后,移动装置处理器将能够辨识出SIM并继续进行正常操作(步骤204),而不要求输入MDIN。
[0029]在一实施例中,处理器可经配置以使用户能够改变指派给移动装置的MDIN。当MDIN受损害时,或当移动装置被售卖且旧用户想要保留他/她的MDIN秘密或新用户希望输入个人的且值得纪念的MDIN时,这可为合意的。在图3中所示的过程流中说明用于实现MDIN的改变的实例方法。
[0030]参看图3,移动装置处理器可经配置以从用户接收改变MDIN的请求(步骤300)。可通过按钮按压或对配置菜单选项的用户选择来传送此请求。举例来说,为了改变MDIN,用户可例如在设定菜单中存取用户接口菜单,且选择用于改变MDIN的菜单选项。在接收到改变MDIN的请求后,处理器可即刻提示用户输入当前(马上为旧的)MDIN(步骤302)。请求对当前MDIN的输入验证了经授权用户尝试改变MDIN。处理器将所输入的MDIN与存储于安全存储器中的MDIN进行比较(步骤303),以确定两个值是否匹配(确定304)。如果所输入的MDIN与存储于安全存储器中的MDIN不匹配(即,确定304=“否”),则处理器将简单地不允许MDIN的改变(步骤306)。任选地,以类似于上文参考图2所描述的方式的方式,处理器可允许改变MDIN的有限数目的用户尝试,且如果尝试的数目超过限值,则处理器可锁定移动装置而不允许任何进一步使用(未图示)。
[0031]如果用户输入正确的MDIN(即,确定304=“是”),则处理器可通过提示用户输入新MDIN而允许进行MDIN的改变(步骤108)。如上文参考图1所描述,处理器可提示用户第二次输入MDIN(步骤110),且将两个输入的值进行比较以确定其是否匹配(确定112)。如果两个MDIN输入不匹配(即,确定112=“否”),则处理器可通过返回到步骤108而提示用户重复两次输入过程。如果第一和第二MDIN输入匹配(即,确定112=“是”),则所接收的新MDIN可存储于移动装置的安全存储器中,进而取代旧MDIN(步骤114)。一旦MDIN已经输入且存储于安全存储器中,移动装置处理器便可返回正常操作(步骤204)。
[0032]适合于与各种实施例一起使用的典型移动装置将共同具有图4中所说明的组件。举例来说,示范性移动装置400可包含耦合到内部存储器192、显示器193并耦合到SIM 199或类似的可移除存储器单元的处理器191。另外,移动装置400可具有连接到无线数据链路的用于发送和接收电磁辐射的天线194和/或耦合到处理器191的蜂窝式电话收发器195。在一些实施方案中,收发器195以及处理器191和存储器192的用于蜂窝式电话通信的部分被统称为空中接口,因为其经由无线数据链路提供数据接口。移动装置通常还包含小键盘196或微型键盘和菜单选择按钮或摇臂开关197以用于接收用户输入。
[0033]处理器191可为任何可编程微处理器、微型计算机或多处理器芯片,其可由软件指令(应用)配置以执行多种功能,包含下文所描述的各种实施例的功能。在一些移动装置中,可提供多个处理器191,例如一个处理器专用于无线通信功能,且一个处理器专用于运行其它应用。通常,在软件应用被存取且加载到处理器191中之前,其可存储在内部存储器192中。在一些移动装置中,处理器191可包含足以存储应用软件指令的内部存储器。处理器的内部存储器可包含安全存储器198,安全存储器198不可由用户或应用直接存取且其能够记录如各种实施例中所描述的MDIN和SIM ID。作为处理器的部分,此安全存储器198在不损坏或更换处理器的情况下不可更换或存取。在某些移动装置中,额外的存储器芯片(例如,安全数据(SD)卡)可插入到装置400中且耦合到处理器191。在许多移动装置中,内部存储器192可为易失性或非易失性存储器,例如快闪存储器,或两者的混合物。为了此描述的目的,对存储器一般参考指代可由处理器191存取的所有存储器,包含内部存储器192、插入到移动装置中的可移除存储器和处理器191本身内的存储器,包含安全存储器198。
[0034]前述方法描述和过程流程图仅作为说明性实例而提供,且既定不需要或暗示必须以所呈现的次序执行各种实施例的步骤。如所属领域的技术人员将了解,前述实施例中的步骤次序可以任何次序执行。此外,例如“其后”、“随后”、“下一个”等词无意限制步骤的次序;这些词仅用于在对方法的描述中引导读者。
[0035]结合本文中所揭示的实施例而描述的各种说明性逻辑块、模块、电路和算法步骤可被实施为电子硬件、计算机软件或两者的组合。为清楚说明硬件与软件的此互换性,上文已大体上关于其功能性而描述了各种说明性组件、块、模块、电路及步骤。所述功能性是实施为硬件还是软件取决于特定应用及强加于整个系统的设计约束。所属领域的技术人员可针对每一特定应用以不同方式来实施所描述的功能性,但所述实施方案决策不应被解释为会导致脱离本发明的范围。
[0036]可使用通用处理器、数字信号处理器(DSP)、专用集成电路(ASIC)、现场可编程门阵列(FPGA)或其它可编程逻辑装置、离散门或晶体管逻辑、离散硬件组件或其经设计以执行本文中所描述的功能的任何组合来实施或执行用于实施结合本文中所揭示的方面而描述的各种说明性逻辑、逻辑块、模块和电路的硬件。通用处理器可以是微处理器,但在替代方案中,处理器可以是任何常规处理器、控制器、微控制器或状态机。处理器还可实施为计算装置的组合,例如,DSP与微处理器的组合、多个微处理器、一个或一个以上微处理器与DSP核心的联合,或任何其它此类配置。或者,一些步骤或方法可由专用于给定功能的电路执行。
[0037]在一个或一个以上示范性方面中,可以硬件、软件、固件或其任何组合来实施所述的功能。如果实施于软件中,则可将功能作为一个或一个以上指令或代码而存储在计算机可读媒体上或经由计算机可读媒体进行传输。本文中所揭示的方法或算法的步骤可体现于可驻留于计算机可读媒体上的所执行的处理器可执行软件模块中。计算机可读媒体包括计算机存储媒体与通信媒体两者,通信媒体包括促进将计算机程序从一处传递到另一处的任何媒体。存储媒体可为任何可由计算机存取的可用媒体。以实例方式(且并非限制),所述计算机可读媒体可包括RAM、ROM、EEPROM、CD-ROM或其它光盘存储装置、磁盘存储装置或其它磁性存储装置,或可用于载送或存储呈指令或数据结构的形式的所要程序代码且可由计算机存取的任何其它媒体。同样,可恰当地将任何连接称作计算机可读媒体。举例来说,如果使用同轴电缆、光纤电缆、双绞线、数字订户线(DSL)或例如红外线、无线电及微波的无线技术从网站、服务器或其它远程源传输软件,则同轴电缆、光纤电缆、双绞线、DSL或例如红外线、无线电及微波的无线技术包括于媒体的定义中。如本文中所使用,磁盘及光盘包括压缩光盘(CD)、激光光盘、光学光盘、数字多功能光盘(DVD)、软盘及蓝光光盘,其中磁盘通常以磁方式再现数据,而光盘使用激光以光学方式再现数据。以上各者的组合也应包括在计算机可读媒体的范围内。另外,方法或算法的操作可作为代码和/或指令中的一者或任何组合或集合驻留于机器可读媒体和/或计算机可读媒体上,其可并入计算机程序产品中。
[0038]提供对所揭示实施例的先前描述,以使所属领域的技术人员能够制作或使用本发明。所属领域的技术人员将容易明白对这些实施例的各种修改,且在不脱离本发明的精神或范围的情况下,本文所界定的一般原理可应用于其它实施例。因此,本发明无意限于本文中所展示的实施例,而是将赋予本发明与所附权利要求书以及本文中所揭示的原理和新颖特征相一致的最广范围。