Method and system for anonymously transmitting messages by means of a telecommunication network

• US 20050025300A1
• Filed: 04/28/2004
• Published: 02/03/2005
• Est. Priority Date: 10/29/2001
• Status: Active Grant

• Current Assignee: InterDigital Patent Holdings, Inc. (InterDigital, Inc.)
• Original Assignee: Swisscom AG (Government of Switzerland)
• Inventors: Lagadec, Roger, Lauper, Eric
• Granted Patent: US 7,356,133 B2
• Time in Patent Office: Days
• US Class Current: 379/201.110
• CPC Class Codes: H04L 51/48 Message addressing, e.g. address format or anonymous messages, aliases
• CPC Class Codes: H04L 51/58 Message adaptation for wireless communication
• CPC Class Codes: H04L 63/0407 wherein the identity of one or more communicating identities is hidden cryptographic mechanisms or cryptographic arrangements for anonymous credentials or for identity based cryptographic systems H04L9/00
• CPC Class Codes: H04M 2207/18 wireless networks
• CPC Class Codes: H04M 3/42008 Systems for anonymous communication between parties, e.g. by use of disposal contact identifiers
• CPC Class Codes: H04M 3/5322 for recording text messages
• CPC Class Codes: H04W 12/02 Protecting privacy or anonymity, e.g. protecting personally identifiable information [PII]
• CPC Class Codes: H04W 12/06 Authentication
• CPC Class Codes: H04W 12/72 Subscriber identity
• CPC Class Codes: H04W 4/12 Messaging; Mailboxes; Announcements
• CPC Class Codes: H04W 60/00 Affiliation to network, e.g. registration; Terminating affiliation with the network, e.g. de-registration
• CPC Class Codes: H04W 8/26 Network addressing or numbering for mobility support

Abstract

Method for anonymously transmitting a message by means of a telecommunication network. A first exchange (2) between the sender (1) and the receiver (4) of said message replaces identifying features (MSISDN) of the sender (1) of the message by a first alias identification (CID). The conversion between the said identifying features (MSISNDN) and the first alias identification (CID) is permanent, or at least secure for several weeks.

The first alias identification (CID) is replaced by a second alias identification (CMID) at the receiver (4) or in a further exchange (3). The second alias identification (CMID) enables the receiver to identify the transmitter.

Claims

1. Method for transmitting a message through a telecommunication network in which identifying features of the sender are replaced with at least one alias identification in at least one exchange between the sender and the receiver,

characterized in that the correspondence between said identifying features and said alias identification is secure for a time period that is long as compared with the average period between successive messages,

in that a correspondence between said received alias identification and the features sufficiently qualifying to said receiver is known by said receiver,

and in that said correspondence between said received alias identification and the sufficiently qualifying features is determined during a registration procedure.

2. The method of claim 1, wherein the correspondence between said received alias identification and said qualifying features is determined by a sender sending to the receiver a registration message with a secret agreed upon between the receiver and the sender.

3. The method of claim 2, wherein said secret is transmitted over a non-anonymized transmission channel between said sender and said receiver.

4. The method of claim 1, wherein at least one of said alias identification is anonymous vis-á

-vis further exchanges.

5. The method of claim 4, wherein identifying features of the sender are replaced with a first alias identification in a first exchange between the sender and the receiver,

and wherein the first alias identification is replaced with the second said alias identification in a second said exchange between the first exchange and said receiver.

6. The method of claim 2, wherein said secret is generated by one said exchange.

7. The method of claim 6, wherein said registration message is transmitted by said exchange on the basis of said secret to the receiver.

8. The method of claim 2, wherein said secret has a limited validity period.

9. The method of claim 1, wherein said sender is a mobile radio telephone and wherein said identifying features are stored in an identification card in said mobile radio telephone.

10. The method of claim 9, wherein said message is a USSD message that is transmitted over a USSD handler to said exchange.

11. The method of claim 9, wherein said message is an SMS that is transmitted over a USSD handler to said exchange.

12. The method of claim 9, wherein said message is a signaling message according to SS7 in an ISDN network.

13. The method of claim 9, wherein at least one said exchange is administered by the operator of the mobile radio network in which said mobile radio telephone of the user is registered.

14. The method of claim 1, wherein the location of said sender is determined at the sender'"'"'s or in one said exchange and copied into said message.

15. The method of claim 5, wherein said further exchange performs marketing statistics on the basis of said anonymized messages.

16. The method of claim 15, wherein said receiver is a service, product or financial provider.

17. The method of claim 15, wherein said receiver can supply a service, a product or a financial service over a direct channel between the receiver and the sender.

18. The method of claim 1, wherein:

a secret is agreed upon during said registration procedure between said receiver and said specific sender,

said sender sends a registration message in which said secret is contained,

said receiver receives said registration message and connects said alias identification with said specific sender and stores said connection.

19. The method of claim 18, wherein said secret has a limited validity period.

20. Computer product that can be loaded in the internal memory of a digital computer system and in which programs are stored that cause said computer system to carry out the method of one of the preceding claims when said program is run.

21. A system that allows the transmission of messages between a plurality of senders and at least one receiver,

characterized by an exchange in which a correspondence between identifying features of said sender and an alias identification associated by said receiver with the sender is stored.

22. The system of claim 21, with a first exchange in which a correspondence between identifying features of said senders and an anonymous alias identification is stored, and with a further exchange in which a correspondence between said anonymous alias identification and said alias identification associated by said receiver with the sender is stored.

23. The system of claim 22, wherein said senders are mobile radio telephones,

and wherein said first exchange is a message handler administered by the operator of the mobile radio network.