Data session authentication credentials update for a wireless communication device

• US 20070077914A1
• Filed: 08/26/2005
• Published: 04/05/2007
• Est. Priority Date: 08/26/2005
• Status: Active Grant

• Current Assignee: Malikie Innovations Limited (Key Patent Innovations Limited)
• Original Assignee: Blackberry Limited
• Inventors: Patterson, Ian, Lewis, Allan, Trevor Plestid, Thomas
• Granted Patent: US 7,634,253 B2
• Time in Patent Office: Days
• US Class Current: 455/411
• CPC Class Codes: H04L 63/20 for managing network security; network security policies in general filtering policies H04L63/0227
• CPC Class Codes: H04W 12/065 Continuous authentication
• CPC Class Codes: H04W 12/068 using credential vaults, e.g. password manager applications or one time password [OTP] applications
• CPC Class Codes: H04W 8/18 Processing of user or subscriber data, e.g. subscribed services, user preferences or user profiles; Transfer of user or subscriber data

Abstract

A method (200) and an apparatus (300) in a wireless portable communication device (102) for maintaining appropriate authentication credentials required for a common data application in a current service network are provided. A method (400) in a wireless communication network (106) for providing current authentication credentials required for the common data application accessible through the wireless communication network (106) is also provided. The wireless portable communication device (102) has default authentication credentials required for the common data application in a default service network (106), receives (204) a data session configuration file including authentication credentials based upon a predetermined condition, prioritizes (206) between the default authentication credentials and the received authentication credentials, and uses (208) the authentication credentials having higher priority for the common data application in the current service network (110). The wireless communication network (106) maintains (404) the current authentication credentials indicative of currently required authentication credentials for the common data application, detects (406) a predetermined condition for transmitting the data session configuration file, and transmits (408) the data session configuration file having the current authentication credentials. Upon receiving (410), the wireless communication network (106) allows (412) proper access to the common data application upon receiving the current authentication credentials.

Claims

1. A method in a wireless portable communication device for maintaining appropriate authentication credentials required for a common data application in a current service network, the wireless portable communication device having default authentication credentials required for the common data application in a default service network, the method comprising:

receiving a data session configuration file including authentication credentials;

prioritizing between the default authentication credentials and the received authentication credentials; and

using the authentication credentials having higher priority for the common data application in the current service network.

2. The method of claim 1, wherein the data session configuration file further includes a list of a plurality of service networks mapped against the received authentication credentials for use with the common data application.

3. The method of claim 1, further comprising:

transmitting a request to receive the data session configuration file before receiving the data session configuration file.

4. The method of claim 1, further comprising:

overwriting the default authentication credentials with the received authentication credentials after prioritizing between the default authentication credentials and the received authentication credentials.

5. The method of claim 4 further comprising:

making the received authentication credentials as new default authentication credentials.

6. The method of claim 1, wherein receiving the data session configuration file includes receiving the data session configuration file upon registering the wireless portable communication device to the current service network using a common registration channel.

7. The method of claim 1, wherein receiving the data session configuration file includes receiving the data session configuration file upon failing to properly access the common data application in the current service network.

8. The method of claim 1, wherein receiving the data session configuration file includes autonomously receiving the data session configuration file periodically.

9. The method of claim 1, wherein receiving the data session configuration file includes receiving the data session configuration file upon roaming from the default service network to the current service network.

10. The method of claim 1, wherein receiving the data session configuration file includes receiving the data session configuration file upon determining that the wireless portable communication device is associated with a different service network from the current service network.

11. The method of claim 1, wherein receiving the data session configuration file includes receiving the data session configuration file upon determining that a subscriber identity module used in the wireless portable communication device is associated with a different service network from at least one of:

a service network associated with the wireless portable communication device, and

the current service network.

12. The method of claim 11, wherein the subscriber identity module is at least one of:

a Subscriber Identity Module used in networks based upon Global System for Mobile Communications, and

a Removable User Identification Module used in networks based upon Code Division Multiple Access.

13. A wireless portable communication device configured to maintain appropriate authentication credentials required for a common data application in a current service network, the wireless portable communication device having default authentication credentials stored in memory, the default authentication credential required for the common data application in a default service network, the wireless portable communication device comprising:

a configuration file receiver configured to receive a data session configuration file including authentication credentials;

a prioritization module coupled to the configuration file receiver and to the memory, the prioritization module configured to prioritize between the default authentication credentials and the received authentication credentials;

a credential selector coupled to the prioritization module, the credential selector configured to select the authentication credentials having higher priority for the common data application in the current service provider; and

a credential transmitter coupled to the credential selector, the credential transmitter configured to transmit the selected authorization credentials for the common data application in the current service network.

14. The wireless portable communication device of claim 13, wherein the data session configuration file further includes a list of a plurality of service network mapped against the received authentication credentials for use with the common data application.

15. The wireless portable communication device of claim 13 further comprising:

a request transmitter coupled to the configuration file receiver, the request transmitter configured to transmit a request to receive the data session configuration file.

16. The wireless portable communication device of claim 13, wherein the memory storing the default authentication credentials is further coupled to the credential selector and is further configured to be overwritten with the selected authentication credentials.

17. The wireless portable communication device of claim 13, wherein the configuration file receiver is further configured to receive the data session configuration file upon registration of the wireless portable communication device to the current service provider using a common registration channel.

18. The wireless portable communication device of claim 13, wherein the configuration file receiver is further configured to receive the data session configuration file upon failure of the wireless portable communication device to properly access the common data application in the current service provider.

19. The wireless portable communication device of claim 13, wherein the configuration file receiver is further configured to autonomously receive the data session configuration periodically.

20. The wireless portable communication device of claim 13, wherein the configuration file receiver is further configured to receive the data session configuration file upon the wireless portable communication device roaming from the default service network to the current service network.

21. The wireless portable communication device of claim 13, wherein the configuration file receiver is further configured to receive the data session configuration file upon determination that the wireless portable communication device is associated with a different service network from the current service network.

22. The wireless portable communication device of claim 13, wherein the configuration file receiver is further configured to receive the data session configuration file upon a determination that a subscriber identity module used in the wireless portable communication device is associated with a different service network from at least one of:

a service network associated with the wireless portable communication device, and

the current service network.

23. The method of claim 22, wherein the subscriber identity module is at least one of:

a Subscriber Identity Module used in networks based upon Global System for Mobile Communications, and

a Removable User Identification Module used in networks based upon Code Division Multiple Access.

24. A method in a wireless communication network for providing current authentication credentials required for a common data application accessible through the wireless communication network, the method comprising:

maintaining the current authentication credentials indicative of currently required authentication credentials for the common data application;

detecting a predetermined condition for transmitting a data session configuration file;

transmitting the data session configuration file having the current authentication credentials; and

allowing proper access to the common data application upon receiving the current authentication credentials.

25. The method of claim 24, wherein maintaining the current authentication credentials indicative of currently required authentication credentials for the common data application includes receiving the currently required authentication credentials for the common data application from a common data service.

26. The method of claim 24, wherein detecting a predetermined condition for transmitting a data session configuration file includes detecting the predetermined condition by a common data service.

27. The method of claim 24, wherein the data session configuration file further includes a list of a plurality of wireless communication networks mapped against the appropriate authentication credentials for use with the common data application.

28. The method of claim 24, wherein the predetermined condition for transmitting the data session configuration file includes:

receiving a request for the data session configuration file.

29. The method of claim 24, wherein the predetermined condition for transmitting the data session configuration file includes:

receiving a registration of a wireless portable communication device using a common registration channel.

30. The method of claim 24, wherein the predetermined condition for transmitting the data session configuration file includes:

determining a registered wireless portable communication device failing to properly access the common data application.

31. The method of claim 24, wherein the predetermined condition for transmitting the data session configuration file includes:

reaching a predetermined periodic transmission time interval.

32. The method of claim 31, wherein transmitting the data session configuration file includes:

broadcasting the data session configuration file.

33. The method of claim 24, wherein the predetermined condition for transmitting the data session configuration file includes:

determining that a wireless portable communication device registered to the wireless communication network is associated with a different wireless communication network from the wireless communication network.

34. The method of claim 24, wherein the predetermined condition for transmitting the data session configuration file includes:

determining that a subscriber identity module used in a registered wireless portable communication device is associated with a different service network from at least one of;

the wireless communication network, and

a wireless communication network associated with the registered wireless portable communication device.

35. The method of claim 34, wherein the subscriber identity module is at least one of:

a Subscriber Identity Module used in networks based upon Global System for Mobile Communications, and

a Removable User Identification Module used in networks based upon Code Division Multiple Access.

36. A method in a common data service for providing current authentication credentials required for a common data application accessible through a wireless communication network, the method comprising:

maintaining the current authentication credentials indicative of currently required authentication credentials for the common data application;

detecting a predetermined condition for transmitting a data session configuration file;

transmitting the data session configuration file having the current authentication credentials; and

allowing proper access to the common data application upon receiving the current authentication credentials.

37. The method of claim 36, wherein the data session configuration file further includes a list of a plurality of wireless communication networks mapped against the appropriate authentication credentials for use with the common data application.

38. The method of claim 36, wherein the predetermined condition for transmitting the data session configuration file includes:

receiving a request for the data session configuration file.

39. The method of claim 36, wherein the predetermined condition for transmitting the data session configuration file includes:

determining a registered wireless portable communication device failing to properly access the common data application.

40. The method of claim 36, wherein the predetermined condition for transmitting the data session configuration file includes:

reaching a predetermined periodic transmission time interval.

42. The method of claim 36, wherein the predetermined condition for transmitting the data session configuration file includes:

determining that a wireless portable communication device registered to the wireless communication network is associated with a different wireless communication network from the wireless communication network.

41. The method of claim 41, wherein transmitting the data session configuration file includes:

broadcasting the data session configuration file.