Contact validation and trusted contact updating in mobile wireless communications devices

• US 20040203598A1
• Filed: 10/09/2002
• Published: 10/14/2004
• Est. Priority Date: 10/09/2002
• Status: Active Grant

• Current Assignee: Google Technology Holdings LLC (Alphabet Inc.)
• Original Assignee: Motorola, Inc. (Motorola Solutions, Inc.)
• Inventors: Aerrabotu, Naveen, Vogedes, Jerome, Tran, Phieu
• Granted Patent: US 7,426,382 B2
• Time in Patent Office: Days
• US Class Current: 455/411
• CPC Class Codes: G06Q 20/3674 involving authentication
• CPC Class Codes: G06Q 20/382 insuring higher security of transaction
• CPC Class Codes: H04L 63/0807 using tickets, e.g. Kerberos cryptographic mechanisms or cryptographic arrangements for entity authentication using tickets or tokens H04L9/3213
• CPC Class Codes: H04L 63/101 Access control lists [ACL]
• CPC Class Codes: H04L 63/126 the source of the received data
• CPC Class Codes: H04M 1/72403 with means for local support of applications that increase the functionality
• CPC Class Codes: H04M 1/72445 for supporting Internet browser applications
• CPC Class Codes: H04W 12/069 using certificates or pre-shared keys

Abstract

A method in a wireless communication device including receiving contact information with a signature from a source (310) not on a trusted contact list, validating (362) the signature by comparing the signature to an reference signature stored on the method in a wireless communication device, and updating (368) the trusted contact list regarding the contact information received if the signature is valid. In some applications, the contact information and signature is associated with a wireless communication device provisioning session request message.

Claims

1. A method in a wireless communication device, comprising:

receiving a session request;

rejecting the session request;

receiving a signature session request having a signature after the rejecting the session request;

validating the signature of the signature session request.

2. The method of claim 1, validating the signature of the signature session request by comparing the signature thereof to information stored on the wireless communication device.

3. The method of claim 1, generating a reference signature on the wireless communication device from information received from a trusted source, validating the signature of the signature session request by comparing the signature of the signature session request to the reference signature generated on the wireless communication device.

5. The method of claim 3, generating the reference signature after rejecting the session request.

6. The method of claim 1, rejecting the session request if a requester of the session is not on a list of trusted contacts stored on the wireless communication device.

7. The method of claim 1, rejecting the session request if a requestor of the session is not on a list of trusted contacts.

8. The method of claim 7, validating the signature of the signature session request by comparing it to a reference signature stored on the wireless communication device.

9. The method of claim 6, adding the requester of the session to the list of trusted contacts stored on the wireless communication device if the signature of the session is valid.

10. The method of claim 1, updating a list of trusted contacts relative to a requester of the signature session if the signature of the signature session is valid.

11. The method of claim 1, validating the session request by determining whether a requester of the session is on a list of trusted contacts stored on the wireless communication device.

4. The method of Clam 3, generating the reference signature before receiving and rejecting the session request.

12. A method in a wireless communication device, comprising:

storing a reference signature from a trusted source on the wireless communication device;

receiving a session request message having an authenticating signature;

validating the authenticating signature of the session request by comparing the authenticating signature of the session request message to the reference signature on the method in a wireless communication device.

13. The method of claim 12, adding a requester of the session to a list of trusted contacts if the authenticating signature of the session request is valid.

14. The method of claim 12, generating the reference signature on the wireless communication device from information received from a trusted source before receiving the session request.

15. The method of claim 12, generating a new reference signature on the wireless communication device from information received from a trusted source upon expiration of a previously stored reference signature.

16. A method in a wireless communication device, comprising:

receiving contact information with a signature from a source not on a trusted contact list;

validating the signature by comparing the signature to an reference signature stored on the method in a wireless communication device;

updating the trusted contact list regarding the contact information received if the signature is valid.

17. The method of claim 16, generating the reference signature on the wireless communication device from information received from a trusted source.

18. The method of claim 16, determining whether the contact information with the signature is from a trusted source by determining whether the contact information is on a trusted contact list stored on the wireless communication device.

19. A wireless communication device provisioning session request message, comprising:

a message header portion,

the header message portion including authenticating signature data from a network service provider;

message body portion.

20. The method of claim 19, the provisioning session request message is a Wireless Application Protocol Session Initiation Request.

21. The method of claim 19, the provisioning session request message is an Internet Over the Air bootstrap request.

22. A method in a server communicating with a wireless communications network, the method comprising:

requesting a signature from the wireless communications network;

sending a session request including an authenticating signature to a mobile wireless communication device in the wireless communications network.

23. The method of claim 22, receiving information from the wireless communications network in response to the request for a signature, generating the session request including the authenticating signature based upon the information received from the wireless communications network.

24. A method in a wireless communication device, comprising:

receiving a wireless communication device provisioning session request message having an authenticating signature;

validating the authenticating signature of the wireless communication device provisioning session request message by comparing the authenticating signature to a reference signature at the wireless communication device.