Method and System to Provide Secure Exchange of Data Between Mobile Phone and Computer System

• US 20070280480A1
• Filed: 06/06/2007
• Published: 12/06/2007
• Est. Priority Date: 06/06/2006
• Status: Active Grant

• Current Assignee: Future Dial Inc
• Original Assignee: Future Dial Inc
• Inventors: Chong, Benedict
• Granted Patent: US 8,918,905 B2
• Time in Patent Office: Days
• US Class Current: 380/270
• CPC Class Codes: G06F 21/12 Protecting executable software
• CPC Class Codes: G06F 21/33 using certificates
• CPC Class Codes: G06F 21/35 communicating wirelessly
• CPC Class Codes: G06F 21/445 by mutual authentication, e.g. between devices or programs
• CPC Class Codes: H04L 2209/24 Key scheduling, i.e. generating round keys or sub-keys for block encryption
• CPC Class Codes: H04L 61/4594 Address books, i.e. directories containing contact information about correspondents telephone directories in user terminals H04M1/27453
• CPC Class Codes: H04L 63/0823 using certificates cryptographic mechanisms or cryptographic arrangements for entity authentication involving certificates H04L9/3263
• CPC Class Codes: H04L 9/006 involving public key infrastructure [PKI] trust models network architecture or network communication protocol for supporting authentication of entities using certificates in a packet data network H04L63/0823
• CPC Class Codes: H04W 12/04 Key management, e.g. using generic bootstrapping architecture [GBA]
• CPC Class Codes: H04W 12/06 Authentication
• CPC Class Codes: H04W 12/08 Access security
• CPC Class Codes: H04W 12/50 Secure pairing of devices
• CPC Class Codes: H04W 88/02 Terminal devices

Abstract

Systems and methods of providing a secure access layer in a mobile phone and a computer system coupled to the mobile phone to provide authentication for transmitting data between the phone and the computer system.

Claims

1. A method comprising:

a first secure access layer stored within a mobile telephone, coupled to a separate computer system, sending an authentication request to a second secure access layer stored within the separate computer system, to determine if the first secure access layer of the mobile telephone and the second secure access layer of the separate computer system, are matching, wherein the second secure access layer of the separate computer system is stored within a dynamic linked library comprising of executable program modules including phone-specific functions used to access data on the mobile phone connected to the computer system;

the first secure access layer within the mobile telephone confirming authenticity of the second secure access layer within the separate computer system by determining the first secure access layer of the mobile telephone and the second secure access layer of the separate computer are matching; and

in response to the first secure access layer within the mobile telephone confirming authenticity of the second secure access layer within the separate computer system by determining the first secure access layer of the mobile telephone and the second secure access layer of the separate computer system are matching, the first secure access layer of the mobile telephone granting authorization to the dynamic linked library to transmit data between the mobile telephone and the separate computer system.

2. The method of claim 1, wherein the first secure access layer within the mobile telephone confirming authenticity of the second secure access layer within the separate computer system by determining the first secure access layer of the mobile telephone and the second secure access layer of the separate computer are matching, further comprises the first secure access layer within the mobile telephone comparing a first certificate of authenticity of the first secure access layer with a second certificate of authenticity received from the second secure access layer of the computer system.

3. The method of claim 2, wherein the first certificate of authenticity of the first secure access layer is a public key infrastructure certificate of authenticity and the second certificate authenticity of the second secure access layer is a public key infrastructure certificate of authenticity.

4. The method of claim 3, further comprising, in response to the first secure access layer within the mobile telephone confirming authenticity of the second secure access layer within the separate computer system by determining the first secure access layer of the mobile telephone and the second secure access layer of the separate computer are matching, the first secure access layer of the mobile telephone granting authorization to a phone access software instance on the computer system to transmit data between the mobile telephone and the separate computer system.

5. The method of claim 4, further comprising, the phone access software instance on the computing system providing access to media content stored on the computer system.

6. The method of claim 4, further comprising, the phone access software instance on the computing system providing access to a phonebook stored on the computer system.

7. A machine-readable medium, having stored thereon a set of instructions, which when executed, cause a machine to perform a method comprising:

a first secure access layer stored within a mobile telephone, coupled to a separate computer system, sending an authentication request to a second secure access layer stored within the separate computer system, to determine if the first secure access layer of the mobile telephone and the second secure access layer of the separate computer system, are matching, wherein the second secure access layer of the separate computer system is stored within a dynamic linked library comprising of executable program modules including phone-specific functions used to access data on the mobile phone connected to the computer system;

the first secure access layer within the mobile telephone confirming authenticity of the second secure access layer within the separate computer system by determining the first secure access layer of the mobile telephone and the second secure access layer of the separate computer are matching; and

in response to the first secure access layer within the mobile telephone confirming authenticity of the second secure access layer within the separate computer system by determining the first secure access layer of the mobile telephone and the second secure access layer of the separate computer system are matching, the first secure access layer of the mobile telephone granting authorization to the dynamic linked library to transmit data between the mobile telephone and the separate computer system.

8. The machine-readable medium of claim 7, wherein the first secure access layer within the mobile telephone confirming authenticity of the second secure access layer within the separate computer system by determining the first secure access layer of the mobile telephone and the second secure access layer of the separate computer are matching, further comprises the first secure access layer within the mobile telephone comparing a first certificate of authenticity of the first secure access layer with a second certificate of authenticity received from the second secure access layer of the computer system.

9. The machine-readable medium of claim 8, wherein the first certificate of authenticity of the first secure access layer is a public key infrastructure certificate of authenticity and the second certificate authenticity of the second secure access layer is a public key infrastructure certificate of authenticity.

10. The machine-readable medium of claim 9, further comprising, in response to the first secure access layer within the mobile telephone confirming authenticity of the second secure access layer within the separate computer system by determining the first secure access layer of the mobile telephone and the second secure access layer of the separate computer are matching, the first secure access layer of the mobile telephone granting authorization to a phone access software instance on the computer system to transmit data between the mobile telephone and the separate computer system.

11. The machine-readable medium of claim 10, further comprising, the phone access software instance on the computing system providing access to media content stored on the computer system.

12. The machine-readable medium of claim 10, further comprising, the phone access software instance on the computing system providing access to a phonebook stored on the computer system.

13. A mobile telephone comprising:

a processor;

a connector to couple the mobile phone with a separate computer system;

a unit to have a first secure access layer send an authentication request to a second secure access layer stored within the separate computer system, to determine if the first secure access layer of the mobile telephone and the second secure access layer of the separate computer system are matching, wherein the second secure access layer of the separate computer system is stored within a dynamic linked library comprising of executable program modules including phone-specific functions used to access data on the mobile phone connected to the computer system;

a unit to have the first secure access layer within the mobile telephone confirm authenticity of the second secure access layer within the separate computer system by determining the first secure access layer of the mobile telephone and the second secure access layer of the separate computer are matching; and

a unit to have the first secure access layer of the mobile telephone grant authorization to the dynamic linked library to transmit data between the mobile telephone and the separate computer system, in response to the first secure access layer within the mobile telephone confirming authenticity of the second secure access layer within the separate computer system by determining the first secure access layer of the mobile telephone and the second secure access layer of the separate computer system are matching.

14. The mobile telephone of claim 13, wherein the unit to have the first secure access layer within the mobile telephone confirm authenticity of the second secure access layer within the separate computer system by determining the first secure access layer of the mobile telephone and the second secure access layer of the separate computer are matching, further comprises a unit to have the first secure access layer within the mobile telephone compare a first certificate of authenticity of the first secure access layer with a second certificate of authenticity received from the second secure access layer of the computer system.

15. The mobile telephone of claim 14, wherein the first certificate of authenticity of the first secure access layer is a public key infrastructure certificate of authenticity and the second certificate authenticity of the second secure access layer is a public key infrastructure certificate of authenticity.

16. The mobile telephone of claim 15, further comprising, a unit to have the first secure access layer of the mobile telephone grant authorization to a phone access software instance on the computer system to transmit data between the mobile telephone and the separate computer system, in response to the first secure access layer within the mobile telephone confirming authenticity of the second secure access layer within the separate computer system by determining the first secure access layer of the mobile telephone and the second secure access layer of the separate computer are matching.

17. The mobile telephone of claim 16, wherein the phone access software instance on the computing system is to provide access to media content stored on the computer system.

18. The mobile telephone of claim 16, wherein the phone access software instance on the computing system is to provide access to a phonebook stored on the computer system.