METHOD FOR OPERATIONAL CHANGES AUTHORIZATION ON A MOBILE PHONE

Abstract: A mobile telephone comprises reception means (5) for receiving message data including identity data, key data and instruction data from a caller, the identity data relating to the caller and the key data relating to the called unit, memory means (7) for storing caller identity data and associated stored security data, data processing means (6) for combining received identity and key data to produce received security data and comparison means (6) for comparing the received security data with stored security data relating to the received identity data, and for processing the instruction data if the received security data is equivalent to the stored security data, or for rejecting the instruction data if the received and stored security data are not equivalent.

Description: METHOD FOR OPERAΗONAL CHANGES AUTHORIZAΗON ON A MOBILE PHONE The present invention relates to mobile telephones and, in particular but not exclusively, to mobile telephones which are able to send and receive short text messages using the short message service provided by GSM Mobile Telephone Standards. DESCRIPTION OF THE RELATED ART The GSM short message service (SMS) can be used by base stations and mobile units within a network to interrogate and gain information from a target mobile unit, and can be used to change operational settings of the mobile unit. Such information could be related to the geographical position of the mobile station, or details of the current cell site in which the mobile station is operating. Some operational settings which may be modified could include details of closed user group numbers, call forwarding or barring details etc. It is therefore desirable to provide a system in which short messages (SMs) that are intended to make operational changes or request information from a mobile unit are encoded to prevent fraudulent use. SUMMARY OF THE PRESENT INVENTION According to one aspect of the present invention, there is provided a method of operating a mobile telephone comprising: receiving message data including identity data, key data and instruction data from a caller, the identity data relating to the caller; combining the identity data and key data to produce received security data; obtaining stored security data from a memory of the telephone on the basis of the received identity data; comparing the received security data with the stored security data; and processing the instruction data if the received security data is equivalent to the stored security data, or rejecting the instruction data if the received and stored security data are not equivalent . BRIEF SUMMARY OF THE DRAWINGS Figure 1 shows a schematic view of a mobile telephone; Figure 2 shows a block diagram of parts of a mobile telephone embodying the present invention; Figures 3 and 4 illustrate a stored data entry and a short message respectively; and Figure 5 is a flow chart illustrating steps in a method embodying the present invention. DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENT A mobile telephone 1 is shown in Figure 1 and includes a display 2 and a keypad 3. As is well known, the GSM mobile telecommunications standard provides for the transmission and reception of short text messages (short message SM) between stations in the mobile network using the short message service (SMS) . Short messages can be used to obtain information regarding a mobile station and can be used to change operational settings of a mobile station. With reference to Figure 2, a mobile telephone 1 includes a display 2, a keypad 3, and an antenna 4. The antenna 4 is connected to transmit/receive means 5 which operate to send and receive signals via the mobile telephone network. A micro-processor 6 controls the functions of the mobile telephone, and is connected to receive and transmit signals via the transmit/receive means 5. In addition, the mobile telephone incorporates a memory 7 which is used to store phone book entries for the user of the telephone . A typical entry in the phone book memory 7 comprises a person's telephone number combined with the name of that person. In an embodiment of the present invention, a security number (SN) is stored in the phone book memory 7. The security number is associated with the number of a caller who is entitled to interrogate the mobile station. This phone book entry is shown schematically in Figure 3, where the calling party's number is shown as CLI (calling line identifier) and the security number as SN. In systems operated in accordance with the present invention, when a station within the mobile network wishes to interrogate another station by way of the short message service (SMS) , a short message (SM) is sent from that station to the station of interest. The contents of the short message are shown schematically in Figure 4. The short message comprises a portion indicating the number of the calling station, a personal identification code which is unique to the station being called, and a message 13. As will be described below, the calling station's number 11 is used in combination with the personal identification code 12 to determine a received security number. This received security number is then compared with the stored security number associated in the phone book of the called station with the caller's number in order to determine whether the message 13 can be processed by the mobile unit. For example, the algorithm combines the personal identity code (PIC) (eg. a four digit number) , with the international telephone number of the requesting station. Such an international telephone number is usually 13 or 14 digits long. The algorithm produces a security number which can contain letters and numbers. The algorithm preferably operates in a similar way to known automatic password generators. With reference to Figure 5, the mobile unit 1 receives a short message (20) including the caller's number and the mobile unit's personal identity code. The calling line identity number and personal identity code (PIC) are combined using an algorithm known only to the mobile unit concerned, to produce a so-called received security number. The calling line identity number 11 of the incoming message is used to identify an entry in the phone book memory 7 , and that phone book entry is used to provide the stored security number for the particular calling station. The PIC is selected by the user in a preferred embodiment of the present invention, and is therefore unique to each mobile telephone. The algorithm used to combine the PIC and the incoming calling line identity number would preferably be determined by the manufacturer, and so would not necessarily be unique to each phone. However, increased security would be provided by an algorithm which is unique to each phone. The received security number is then compared with the stored security number and if these numbers are not equivalent to one another, the incoming message is rejected. However, if the two numbers are equivalent, then the message is accepted, and processed by the mobile telephone. Accordingly, embodiments of the present invention can provide a mobile telephone which can enable secure access to information provided by the mobile telephone, by storing a security number for a particular calling station in a telephone book entry in the phone book memory of the telephone. Since the combining algorithm and the security number are confidential to the mobile telephone user, heightened security is possible.

Claims: CLAIMS 1. A method of operating a mobile telephone comprising: receiving message data including identity data, key data and instruction data from a caller, the identity data relating to the caller and the key data relating to the called unit; combining the identity data and key data to produce received security data; obtaining stored security data from a memory of the telephone on the basis of the received identity data; comparing the received security data with the stored security data; and processing the instruction data if the received security data is equivalent to the stored security data, or rejecting the instruction data if the received and stored security data are not equivalent . 2. A method as claimed in claim 1, wherein the message data is in the form of a GSM short message and the stored security data is stored in a user accessible storage area of the mobile telephone . 3. A method as claimed in claim 2 , wherein the storage area is a telephone book memory for storing caller identity data and associated stored security data. 4. A method as claimed in claim 1, 2 or 3 , wherein the identity data and key data are combined by the use of an algorithm uniquely associated with the called unit. 5. A mobile telephone comprising: reception means for receiving message data including identity data, key data and instruction data from a caller, the identity data relating to the caller and the key data relating to the called unit; memory means for storing caller identity data and associated stored security data; data processing means for combining received identity and key data to produce received security data; and comparison means for comparing the received security data with stored security data relating to the received identity data, and for processing the instruction data if the received security data is equivalent to the stored security data, or for rejecting the instruction data if the received and stored security data are not equivalent . 6. A mobile telephone as claimed in claim 5, wherein the message data is in the form of a GSM short message and the stored security data is stored in a user accessible storage area. 7. A mobile telephone as claimed in claim 6, wherein the storage area is a telephone book memory of the mobile telephone, the telephone book memory storing caller identity data and associated stored security data. 8. A mobile telephone as claimed in claim 4 or 5, wherein the data processing means operates in accordance with an algorithm uniquely associated with the mobile telephone.

Inventors: HOLMES GARY, HOLMES, GARY
Applicants: ERICSSON TELEFON AB L M, TELEFONAKTIEBOLAGET LM ERICSSON
Application year: 1999
Main classification: H04Q7
IPC codes: H04M1, H04W4, H04W8, H04W12