System and method for improved security in handset reprovisioning and reprogramming

• US 20030033525A1
• Filed: 07/25/2002
• Published: 02/13/2003
• Est. Priority Date: 08/10/2001
• Status: Active Grant

• Current Assignee: Kyocera Corporation
• Original Assignee: Kyocera Wireless Corporation (Kyocera Corporation)
• Inventors: Rajaram, Gowri
• Granted Patent: US 7,254,386 B2
• Time in Patent Office: Days
• US Class Current: 713/168
• CPC Class Codes: G06F 8/658 Incremental updates; Differential updates
• CPC Class Codes: G06F 9/44521 Dynamic linking or loading; Link editing at or after load time, e.g. Java class loading
• CPC Class Codes: H04W 12/08 Access security
• CPC Class Codes: H04W 12/35 Protecting application or service provisioning, e.g. securing SIM application provisioning
• CPC Class Codes: H04W 8/22 Processing or transfer of terminal data, e.g. status or physical capabilities
• CPC Class Codes: H04W 8/245 from a network towards a terminal
• CPC Class Codes: H04W 88/02 Terminal devices

Abstract

Systems and methods for improved security in handset reprogramming are provided that prevent a handset from being reprogrammed in the field without authorization from carrier. When a handset receives a reprogramming request, or detects a reprogramming attempt, the handset contacts the carrier for authorization to be reprogrammed. The network can provide the authorization, deny the authorization, require additional information from the reprogramming device, or contact the reprogramming device directly to authorize the reprogramming. Additionally, the carrier may provide the handset and the reprogramming device each with a private key that can be converted by each device and then compared by the handset to determine if the reprogramming device is authorized.

Claims

1. A method for improved security in reprogramming wireless communication devices, the method comprising the steps of:

receiving an authorization request from a reprogrammable wireless communication device in communication with a reprogramming device, the authorization request having a unique identifier for the requesting reprogrammable wireless communication device;

consulting a data storage area for reprogramming information pertaining to the reprogrammable wireless communication device;

determining the current programming status of the reprogrammable wireless communication device; and

sending an authorization response to the reprogrammable wireless communication device based on the current programming status.

2. The method of claim 1, wherein the authorization response denies reprogramming.

3. The method of claim 1, wherein the authorization response allows reprogramming.

4. The method of claim 1, wherein the authorization response allows partial reprogramming.

5. The method of claim 1, further comprising the steps of:

storing the authorization request and the authorization response in the data storage area; and

associating the authorization request and the authorization response with the requesting reprogrammable wireless communication device.

6. The method of claim 1, wherein the authorization request comprises contact information for the reprogramming device, further comprising the steps of:

sending a private key to the reprogrammable wireless communication device; and

sending the private key to the reprogramming device, wherein the private keys are converted by the respective devices and compared to determine the reprogramming authorization response.

7. A computer readable medium having stored thereon one or more sequences of instructions for causing one or more microprocessors to perform the steps for improved security in reprogramming wireless communication devices, the steps comprising:

receiving an authorization request from a reprogrammable wireless communication device, the authorization request having a unique identifier for the requesting reprogrammable wireless communication device;

consulting a data storage area for reprogramming information pertaining to the reprogrammable wireless communication device;

determining the current programming status of the reprogrammable wireless communication device; and

sending an authorization response to the reprogrammable wireless communication device based on the current programming status.

8. The computer readable medium of claim 7, wherein the authorization response denies reprogramming.

9. The computer readable medium of claim 7, wherein the authorization response allows reprogramming.

10. The computer readable medium of claim 7, wherein the authorization response allows partial reprogramming.

11. The computer readable medium of claim 7, further comprising instructions for performing the steps of:

storing the authorization request and the authorization response in the data storage area; and

associating the authorization request and the authorization response with the requesting reprogrammable wireless communication device.

12. The computer readable medium of claim 7, wherein the authorization request comprises contact information for the reprogramming device, further comprising instructions for performing the steps of:

sending a private key to the reprogrammable wireless communication device; and

sending the private key to the reprogramming device, wherein the private keys are converted by the respective devices and compared to determine the reprogramming authorization response.

13. A system for improved security in reprogramming wireless communication devices, the system comprising:

a reprogrammable wireless communication device having a serial interface adaptable for communication with a reprogramming device; and

a security server communicatively coupled with the reprogrammable wireless communication device over a wireless communication network, wherein the reprogrammable wireless communication device in response to a communication from the reprogramming device, contacts the security server for authorization to be reprogrammed.

14. The system of claim 13, further comprising a data storage area coupled with the security server, the data storage area configured to store information related to the reprogramming of reprogrammable wireless communication devices.

15. The system of claim 13, wherein the reprogrammable wireless communication device comprises an access code, the access code providing authorization to reprogram the reprogrammable wireless communication device.

16. The system of claim 15, wherein the reprogrammable wireless communication device is configured to deny reprogramming when the authorization code is provided.

17. The system of claim 13, wherein the reprogrammable wireless communication device further comprises an access flag, wherein the access flag is modifiable by the security server.

18. The system of claim 17, wherein the access flag is set to allow the handset to authorize reprogramming.

19. The system of claim 17, wherein the access flag is set to require the security server to authorize handset reprogramming.

20. The system of claim 17, wherein the access flag is set to allow reprogramming without authorization.

21. A method for improved security in reprogramming wireless communication devices, the method comprising the steps of:

receiving a reprogramming request at a reprogrammable wireless communication device;

sending a query from the reprogrammable wireless communication device to a carrier security server via a wireless communication means;

receiving a response from the security server via the wireless communication means, the response authorizing or denying the reprogramming request; and

responding to the reprogramming request according to the response.

22. A method for providing variable reprogramming access to a reprogrammable wireless communication device, the method comprising the steps of:

compiling a remote opcode set comprising at least one remote opcode and a data payload; and

sending the remote opcode set to a plurality of handsets, wherein processing of the remote opcode set causes each handset to modify its level of reprogramming security.

23. The method of claim 22, wherein the modification comprises turning off reprogramming security for a discrete time interval.

24. The method of claim 22, wherein the modification comprises allowing the handset to authorize handset reprogramming.

25. The method of claim 22, wherein the modification comprises requiring a security server to authorize handset reprogramming.