Cellular device security apparatus and method

• US 20050197099A1
• Filed: 05/06/2004
• Published: 09/08/2005
• Est. Priority Date: 03/08/2004
• Status: Active Grant

• Current Assignee: RN Nehushtan Trust Limited (Nehushtan Trust)
• Original Assignee: Lan-Ver Technologies Solutions Limited
• Inventors: Nehushtan, Rafi
• Granted Patent: US 8,548,429 B2
• Time in Patent Office: Days
• US Class Current: 455/410
• CPC Class Codes: H04L 63/083 using passwords cryptographic mechanisms or cryptographic arrangements for entity authentication using a predetermined code H04L9/3226
• CPC Class Codes: H04L 63/0838 using one-time-passwords
• CPC Class Codes: H04M 1/70 Lock-out or secrecy arrangements in party-line systems
• CPC Class Codes: H04W 12/068 using credential vaults, e.g. password manager applications or one time password [OTP] applications
• CPC Class Codes: H04W 12/08 Access security
• CPC Class Codes: H04W 12/12 Detection or prevention of fraud
• CPC Class Codes: H04W 8/22 Processing or transfer of terminal data, e.g. status or physical capabilities
• CPC Class Codes: H04W 88/02 Terminal devices

Abstract

A cellular communication device has one or more access modes which allow reading and writing of data, for example to change its settings, for example passwords and even the entire operating system and also permitting access to personal information such as the user'"'"'s telephone book. To prevent cloning and like illegal access activity, the device is configured by restricting access to such data access modes using a device unique security setting. The setting may be a password, preferably a one-time password, or it may be a unique or dynamic or one time configuration of the codes for the read and write instructions of the data mode. There is also disclosed a server, which manages the security settings such that data mode operates during an active connection between the device and the server, and a secure communication protocol for communicating between the server and the cellular device.

Claims

1. A cellular communication device having an access mode for allowing reading and writing of data to change settings on said cellular communication device, said device being configured with an access restrictor to restrict use of said access mode in accordance with a device unique security setting.

2. The cellular communication device of claim 1, wherein said device unique security setting is comprised physically on said device.

3. The cellular communication device of claim 1, wherein said device unique security setting is a software setting.

4. The cellular communication device of claim 1, wherein said device unique security setting is a coding configuration for data read or data write instructions.

5. The cellular communication device of claim 1, wherein said device unique security setting is a dynamic password.

6. The cellular communication device of claim 5, wherein said dynamic password is a one-time password.

7. The cellular communication device of claim 1, wherein said device unique security setting is constructed using at least one device specific data item and at least one random data item.

8. The cellular communication device of claim 7, wherein said device unique security setting is constructed using two device specific data items and two random data items.

9. The cellular communication device of claim 1, wherein said device unique security setting is dynamically changed over a series of data access mode operations.

10. The cellular communication device of claim 1, wherein said device unique security setting is accessible only via a predetermined communication protocol.

11. The cellular communication device of claim 10, wherein said predetermined communication protocol comprises a specified sequence of communication packets.

12. The cellular communication device of claim 10, wherein said predetermined communication protocol comprises a specified structure of communication packets.

13. The cellular communication device of claim 10, being in physical association with a client program for managing said predetermined communication protocol.

14. The cellular communication device of claim 13, wherein said client program is configured to set said cellular communication device into said data access mode for accessing of data when it is satisfied that said device unique security setting is correct.

15. A cellular communication device having a data access mode for allowing reading and writing of data to change settings on said cellular communication device, said device being configured to restrict entry into said data access mode to an active connection involving a predetermined secure server.

16. A cellular communication device according to claim 15, wherein said active connection is identifiable via a device unique security setting.

17. The cellular communication device of claim 16, wherein said device unique security setting is a coding configuration for data read or data write instructions.

18. The cellular communication device of claim 16, wherein said device unique security setting is a dynamic password.

19. The cellular communication device of claim 18, wherein said dynamic password is a one-time password.

20. The cellular communication device of claim 16, wherein said device unique security setting is constructed using at least one device specific data item and at least one random data item.

21. The cellular communication device of claim 20, wherein said device unique security setting is constructed using two device specific data items and two random data items.

22. The cellular communication device of claim 16, wherein said device unique security setting is dynamically changed over a series of data access mode operations.

23. The cellular communication device of claim 15, wherein said device unique security setting is accessible only via a predetermined communication protocol.

24. The cellular communication device of claim 23, wherein said predetermined communication protocol comprises a specified sequence of communication packets.

25. The cellular communication device of claim 23, wherein said predetermined communication protocol comprises a specified structure of communication packets.

26. The cellular communication device of claim 23, being in association with a client program for managing said predetermined communication protocol.

27. The cellular communication device of claim 26, wherein said client program is configured to set said cellular communication device into said data access mode when it is satisfied that said device unique security setting is correct.

28. The cellular communication device of claim 26, wherein said client program is configured to check regularly using said protocol that said connection is active, and to disable said data access mode when said connection is not active.

29. A server for supporting data configuration operations at cellular communication devices connecting remotely via a network, the server comprising a database of unique secure data regarding said cellular communication devices and mode access functionality for using said unique secure data to generate device specific data mode entry commands required at said cellular communication devices, to permit entry into data mode at said cellular communication devices.

30. The server of claim 29, wherein said unique secure data seeds a device unique security setting.

31. The server of claim 30, wherein said device unique security setting is a coding configuration for data mode entry, data read or data write instructions.

32. The server of claim 30, wherein said device unique security setting is a dynamic password.

33. The server of claim 32, wherein said dynamic password is a one-time password.

34. The server of claim 30, wherein said device unique security setting is constructed using at least one device specific data item and at least one random data item.

35. The server of claim 34, wherein said device unique security setting is constructed using two device specific data items and two random data items.

36. The server of claim 30, wherein said device unique security setting is dynamically changed over a series of data mode operations.

37. The server of claim 29, wherein said device specific data mode entry command is accessible only via a predetermined communication protocol.

38. The server of claim 37, wherein said predetermined communication protocol comprises a specified sequence of communication packets.

39. The server of claim 37, wherein said predetermined communication protocol comprises a specified structure of communication packets.

40. The server of claim 37, being in association with a client program for managing said predetermined communication protocol.

41. The server of claim 40, wherein said client program is configured to set said cellular communication device into said data mode when it is satisfied that said device specific data mode entry setting is correct.

42. The server of claim 40, wherein said client program is configured to set said cellular communication device to disable said data mode when it appears that a connection with said server is not active.

43. A method of restricting access to a reconfiguration mode of each one of a plurality of cellular communication devices, the method comprising:

holding device dependent information of each of said plurality of cellular communication devices,

using said device dependent information to create device unique security settings for said plurality of devices, and

configuring said plurality of devices such that a respective device unique security setting is required to support said reconfiguration mode.

44. The method of claim 43, wherein said device dependent information seeds said device unique security setting.

45. The method of claim 44, wherein said unique security setting is a coding configuration for data read or data write instructions of said configuration mode.

46. The method of claim 44, wherein said unique security setting is a dynamic password.

47. The method of claim 46, wherein said dynamic password is a one-time password.

48. The method of claim 44, wherein said device unique security setting is constructed using at least one device specific data item and at least one random data item.

49. The method of claim 44, wherein said device unique security setting is constructed using two device specific data items and two random data items.

50. The method of claim 44, wherein said device unique security setting is dynamically changed over a series of data mode operations.

51. A cellular communication device capable of communication with an external source for configuration of said cellular communication device, said cellular communication device comprising a configuration enabler for enabling or disabling said communication in accordance with a device unique security setting.

52. The cellular communication device of claim 51, wherein said device unique security setting is comprised physically on said device.

53. The cellular communication device of claim 51, wherein said device unique security setting is a software setting.