Maintaining Mobile Terminal Information for Secure E-Mail Communications

• US 20090054034A1
• Filed: 09/05/2008
• Published: 02/26/2009
• Est. Priority Date: 11/22/2004
• Status: Active Grant

• Current Assignee: Seven Networks LLC (SoftBank Group Corp.)
• Original Assignee: Seven Networks Inc
• Inventors: Groeber, Marcus, Ahonen, Jukka, Salorinne, Seppo, Vuornos, Lauri, Backholm, Ari, Ketonen, Marko, Saarlilahti, Antti, Salmi, Petri
• Granted Patent: US 8,805,334 B2
• Time in Patent Office: Days
• US Class Current: 455/410
• CPC Class Codes: H04L 51/58 Message adaptation for wireless communication
• CPC Class Codes: H04L 63/0428 wherein the data content is protected, e.g. by encrypting or encapsulating the payload
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 63/18 using different networks or channels, e.g. using out of band channels cryptographic mechanisms or cryptographic arrangements for key distribution involving distinctive intermediate devices or communication paths H04L9/0827; cryptographic mechanisms or cryptographic arrangements for authentication using a plurality of channels H04L9/3215
• CPC Class Codes: H04W 12/02 Protecting privacy or anonymity, e.g. protecting personally identifiable information [PII]
• CPC Class Codes: H04W 12/033 of the user plane, e.g. user's traffic
• CPC Class Codes: H04W 12/06 Authentication
• CPC Class Codes: H04W 4/12 Messaging; Mailboxes; Announcements

Abstract

Methods and systems for maintaining mobile terminal information for secure email communications are provided. Information concerning multiple mobile terminals are maintained. Such information may include encryption information and an identifier for each mobile terminal. A service activation code that includes encryption information and an identifier from an authenticated user of the mobile terminal is received. The encryption information may be provided to a connectivity function for use in establishing an encrypted data channel. The established encrypted data channel may then be used to convey e-mail communications to and from the mobile terminal.

Claims

1. A method for securing e-mail communications with a mobile terminal, the method comprising:

maintaining information concerning a plurality of mobile terminals, the information comprising encryption information and an identifier for each mobile terminal;

receiving a service activation code comprising encryption information and an identifier from an authenticated user of the mobile terminal, wherein the encryption information from the service activation code is provided to a connectivity function for use in establishing an encrypted data channel; and

using the established encrypted data channel to convey e-mail communications to and from the mobile terminal.

2. The method of claim 1, wherein the mobile terminal has an e-mail address under the e-mail server and a permanent terminal identity and a temporary identity in an access network.

3. The method of claim 1, wherein the encryption information is based on an equipment identity of the mobile terminal.

4. The method of claim 1, wherein authenticating a user of the mobile terminal using the service activation code occurs off-line.

5. The method of claim 4, wherein the encryption information is displayed on a display of the mobile terminal for entry at an authenticating terminal.

6. The method of claim 5, wherein the display of the mobile terminal provides the encryption information to the user for manual entry at the authenticating terminal.

7. The method of claim 1, further comprising registering the service activation code with the connectivity function.

8. The method of claim 1, wherein the service activation code further comprises a checksum for determining validity of the service activation code.

9. The method of claim 1, further comprising receiving service provisioning settings from the connectivity function.

10. A system for securing e-mail communications with a mobile terminal, the system comprising:

an e-mail server configured to receive e-mail communications for a user of the mobile terminal;

a host system configured to authenticate the user of the mobile terminal;

a connectivity function configured to establish an encrypted data channel for e-mail communications with the mobile terminal using encryption information generated at the mobile terminal and an identifier of the mobile terminal; and

a messaging center configured to provide e-mail communications received by the e-mail server to the mobile terminal via the established encrypted data channel.

11. A computer-readable storage medium having embodied thereon a program, the program being executable by a computer processor to perform a method, the method comprising:

maintaining information concerning a plurality of mobile terminals, the information comprising encryption information and an identifier for each mobile terminal;

receiving a service activation code comprising encryption information and an identifier from an authenticated user of the mobile terminal, wherein the encryption information from the service activation code is provided to a connectivity function for use in establishing an encrypted data channel; and

using the established encrypted data channel to convey e-mail communications to and from the mobile terminal.