VIRTUAL SIM CARD FOR MOBILE HANDSETS

• US 20090163175A1
• Filed: 12/24/2007
• Published: 06/25/2009
• Est. Priority Date: 12/24/2007
• Status: Active Grant

• Current Assignee: Qualcomm, Inc.
• Original Assignee: Qualcomm, Inc.
• Inventors: DUDANI, Ajay, TANGIRALA, Venkat, DURAND, Julian, SHI, Guangming
• Granted Patent: US 8,200,736 B2
• Time in Patent Office: Days
• US Class Current: 455/411
• CPC Class Codes: H04L 63/0853 using an additional device, e.g. smartcard, SIM or a different communication terminal cryptographic mechanisms or cryptographic arrangements for entity authentication involving additional secure or trusted devices H04L9/3234
• CPC Class Codes: H04L 63/0861 using biometrical features, e.g. fingerprint, retina-scan cryptographic mechanisms or cryptographic arrangements for entity authentication using biological data H04L9/3231
• CPC Class Codes: H04W 12/062 Pre-authentication
• CPC Class Codes: H04W 12/068 using credential vaults, e.g. password manager applications or one time password [OTP] applications
• CPC Class Codes: H04W 12/069 using certificates or pre-shared keys
• CPC Class Codes: H04W 12/42 using virtual identity modules
• CPC Class Codes: H04W 8/205 Transfer to or from user equipment or user record carrier

Abstract

A system and method for providing a capability to backup cellular telephone provisioning information and personal data from a mobile handset on a server. A user initializes an account with a service provider with authentication credentials and backs up provisioning information and personal data stored within a mobile handset to server for safe keeping. The provisioning information and personal data can be accessed via the cellular telephone network so that the provisioning and personal data can be transferred among mobile handsets. This allows a user to restore personal data quickly and easily if a mobile handset replaced, lost or destroyed. The system and method further provide the capability to remotely provision new mobile handsets.

Claims

1. A method for provisioning a mobile handset, comprising:

storing provisioning information for the mobile handset in a central database;

receiving via a cellular telephone network an account name and an authentication credential from a user of the mobile handset; and

downloading the mobile handset provisioning information to the mobile handset using a cellular telephone network.

2. The method of claim 1, further comprising authenticating the user based on the received account name and authentication credential prior to downloading the handset provisioning information to the mobile handset.

3. The method of claim 1, wherein the authentication credential comprises an alphanumeric password.

4. The method of claim 1, wherein the authentication credential comprises biometric information.

5. The method of claim 4, further wherein the authentication credential also comprises an alphanumeric password.

6. The method of claim 1, wherein the authentication credential comprises finger print information generated by a finger print scanner.

7. The method of claim 1, wherein the authentication credential comprises a retinal scan generated by a camera capable of scanning the user'"'"'s retina.

8. The method of claim 1, wherein the authentication credential comprises an image of a the user'"'"'s facial features generated by a camera capable of performing facial recognition.

9. The method of claim 1, wherein the authentication credential comprises a handwriting sample generated by a digital pen and pad.

10. The method of claim 1, wherein the authentication credential comprises a three dimensional scan of a shape and depth of the user'"'"'s ear canal generated by a three dimensional scanning sensor.

11. The method of claim 1, wherein the authentication credential comprises a spoken phrase suitable for a voice print comparison.

12. The method of claim 1, wherein the handset provisioning information is automatically downloaded to the mobile handset every time the mobile handset is powered up.

13. The method of claim 1, further comprising:

storing the user'"'"'s personal data for the mobile handset in the central database; and

downloading the user'"'"'s personal data to the mobile handset using the cellular telephone network.

14. The method of claim 1, wherein the central database is a VSIM database coupled to a server, and the server is configured to receive and transmit data via the cellular telephone network.

15. The method of claim 2, wherein authenticating the user is accomplished by an authentication server.

16. The method of claim 1, further comprising accessing at least one operator provisioning center which contains provisioning information.

17. The method of claim 1, wherein the central database contains provisioning information for a plurality of cellular telephone service providers

18. The method of claim 1, further comprising requesting the user to select one service provider from a selection of multiple service providers.

19. The method of claim 12, wherein downloading the mobile handset provisioning information downloads provisioning information from the selected service provider to the mobile handset.

20. A method for restoring personal data for use in a user'"'"'s mobile handset, comprising:

requesting the user to enter an authentication credential into the mobile handset;

receiving the entered authentication credentials at an authentication server via a cellular telephone network;

authenticating the user if the entered authentication credential matches an authentication credential previously stored in an authentication database;

granting access to personal data previously stored in a VSIM database if the user is authenticated; and

transmitting personal data to the user'"'"'s mobile handset for storage in an internal memory of the mobile handset.

21. The method of claim 20, further comprising storing mobile handset provisioning information in a server accessible by a mobile handset;

and

downloading the handset provisioning information to the mobile handset using the cellular telephone network.

22. The method of claim 21, wherein the user is authenticated prior to downloading provisioning information and personal data.

23. The method of claim 20, wherein requesting the user to enter an authentication credential comprises requesting the user to perform an act that generates biometric data.

24. The method of claim 20, wherein requesting the user to enter an authentication credential comprises requesting the user to key in an alphanumeric password.

25. The method of claim 23, further wherein requesting the user to enter an authentication credential further comprises requesting the user to key in an alphanumeric password.

26. The method of claim 23, wherein said act requires the user to swipe a finger over a fingerprint sensor.

27. The method of claim 23, further wherein said act requires the user to record a voice recognition sample.

28. The method of claim 23, further wherein said act requires the user to provide a retinal scan.

29. The method of claim 23, further wherein said act requires the user to provide a facial image.

30. The method of claim 23, further wherein said act requires the user to provide a handwriting sample.

31. The method of claim 23, further wherein said act is a scan of the user'"'"'s ear canal.

32. The method of claim 20, wherein the user'"'"'s personal data is automatically transmitted every time the mobile handset is powered up.

33. The method of claim 20, wherein the user'"'"'s personal data is automatically transmitted at a preset interval.

34. A method for preserving personal data for use in a user'"'"'s mobile handset, comprising:

requesting the user to enter an authentication credential into the mobile handset;

receiving the entered authentication credential at an authentication server via a cellular telephone network;

authenticating the user if the entered authentication credential matches an authentication credential previously stored in an authentication database;

granting the user access to modify personal data stored in a VSIM database if the user is authenticated;

receiving personal data from the user'"'"'s mobile handset via the cellular telephone network; and

storing the received personal data to a VSIM database.

35. The method of claim 34, wherein authenticating the user is performed by an authentication server.

36. The method of claim 34, wherein requesting the user to enter an authentication credential comprises requesting the user to perform an act that generates biometric data.

37. The method of claim 34, wherein requesting the user to enter an authentication credential comprises requesting the user to key in an alphanumeric password.

38. The method of claim 34, wherein requesting the user to enter an authentication credential further comprises requesting the user to key in an alphanumeric password.

39. The method of claim 36, wherein said act requires the user to swipe a finger over a fingerprint sensor.

40. The method of claim 36, further wherein said act requires a user to record a voice recognition sample.

41. The method of claim 36, further wherein said act requires a user to provide a retinal scan.

42. The method of claim 36, further wherein said act requires the user to provide a facial image.

43. The method of claim 36, further wherein said act requires the user to provide a handwriting sample.

44. The method of claim 36, further wherein said act requires the user to provide a scan of the user'"'"'s ear canal.

45. The method of claim 34, wherein the user'"'"'s personal data is automatically stored in the VSIM database each time the user modifies the personal data stored in the internal memory of the mobile handset.

46. The method of claim 34, wherein the user'"'"'s personal data is automatically preserved every time the mobile handset is powered up.

47. The method of claim 34, wherein the user'"'"'s personal data is automatically preserved at a preset interval.

48. A system for transferring and preserving personal data for use in a user'"'"'s mobile handset, comprising:

means for requesting the user to enter an authentication credential into the mobile handset;

means for receiving the entered authentication credential via a cellular telephone network;

means for authenticating the user if the entered authentication credential matches an authentication credential previously stored in an authentication database;

means for granting access to personal data previously stored in a VSIM database if the user is authenticated; and

means for receiving personal data from the user'"'"'s mobile handset via the cellular telephone network;

means for storing the received personal data to the VSIM database; and

means for transferring personal data stored in the VSIM database to an internal memory of the user'"'"'s mobile handset via the cellular telephone network.

49. The system of claim 48, further comprising means for storing provisioning information for the mobile handset.

50. The system of claim 49, wherein said means for storing provisioning data is a provisioning database in communication with the means for transferring personal data.

51. The system of claim 48, wherein the means for authenticating the user is an authentication server external to the mobile handset.

52. The system of claim 48, further comprising means for recording biometric data.

53. The system of claim 52, wherein the means for recording biometric data is an authentication server external to the mobile handset.

54. A computer readable medium having stored thereon computer executable instructions for restoring personal data to a user'"'"'s mobile handset, the computer executable instructions configured to cause a server to perform steps comprising:

requesting the user to enter an authentication credential into the mobile handset;

receiving the entered authentication credential via a cellular telephone network and providing the entered authentication credential at an authentication server;

granting access to personal data previously stored in a VSIM database if the user is authenticated by the authentication server; and

transmitting via the cellular telephone network personal data to the user'"'"'s mobile handset for storage in an internal memory of the mobile handset.

55. The computer readable medium of claim 54, wherein the computer executable instructions further comprise instructions to cause the server to:

store mobile handset provisioning information; and

download the handset provisioning information to the mobile handset using the cellular telephone network.

56. The computer readable medium of claim 54, wherein the computer executable instructions further comprise instructions to cause the server to request the user to perform an act that generates biometric data.

57. The computer readable medium of claim 54, wherein the computer executable instructions further comprise instructions to cause the server to request the user to key in an alphanumeric password.

58. The computer readable medium of claim 56, wherein the computer executable instructions further comprise instructions to further cause the server to request the user to key in an alphanumeric password.

59. The computer readable medium of claim 54, wherein the computer executable instructions further comprise instructions to cause the server to request the user to swipe a finger over a fingerprint sensor.

60. The computer readable medium of claim 54, wherein the computer executable instructions further comprise instructions to cause the server to request the user to record a voice recognition sample.

61. The computer readable medium of claim 54, wherein the computer executable instructions further comprise instructions to cause the server to request the user to provide a retinal scan.

62. The computer readable medium of claim 54, wherein the computer executable instructions further comprise instructions to cause the server to request the user to provide a facial recognition image.

63. The computer readable medium of claim 54, wherein the computer executable instructions further comprise instructions to cause the server to request the user to provide a handwriting sample.

64. The computer readable medium of claim 54, wherein the computer executable instructions further comprise instructions to cause the server to request the user to provide a scan of the user'"'"'s ear canal.

65. The computer readable medium of claim 54, wherein the computer executable instructions further comprise instructions to request the user to cause the server to perform steps comprising:

receiving via the cellular telephone network personal data from the user'"'"'s mobile handset; and

storing the received personal data to a VSIM database.

66. A system for transferring and preserving personal data for use in a user'"'"'s mobile handset, comprising:

a mobile handset having an internal memory, wherein the mobile handset is configured to access the internal memory for provisioning and user personal data;

a VSIM server having a VSIM processor, wherein the VSIM server configured to be accessible by the mobile handset via a cellular telephone network;

a VSIM database in communication with the VSIM server, wherein the VSIM database is configured to store provisioning and personal data for use on the mobile handset;

an authentication server having an authentication processor in communication with the VSIM server; and

an authentication database in communication with the authentication server,

wherein the VSIM server is configured to;

receive from a user authentication information sent by the mobile handset via the cellular telephone network; and

grant the user access to personal data in the VSIM database if the user is authenticated by the authentication processor.

67. The system of claim 66, wherein the VSIM server is further configured to store mobile handset provisioning information in at least one operator provisioning server accessible by a mobile handset, and download the provisioning data to the mobile handset using the cellular telephone network.

68. The system of claim 66, wherein the VSIM server is further configured to download the provisioning data to the mobile handset using the cellular telephone network.

69. The system of claim 66 wherein:

the VSIM server is further configured to receive from the mobile handset via the cellular telephone network user personal data stored in the internal memory of the mobile handset; and

mobile handset is configured to transmit to the VSIM server via the cellular telephone network user personal data stored in the internal memory.

70. The system of claim 66, wherein:

the VSIM server is further configured to transmit to the mobile handset via the cellular telephone network user personal data for storage in the internal memory of the mobile handset; and

mobile handset is configured to receive user personal data from the VSIM server via the cellular telephone network and to store the received user personal data in the internal memory.

71. The system of claim 66, wherein the mobile handset further comprises a biometric sensor, and the authentication server is configured to authenticate a user based upon biometric information.

72. The system of claim 66, wherein the mobile handset further comprises a keypad, and the authentication server is configured to authenticate a user based upon an alphanumeric password.

73. The system of claim 71, wherein the mobile handset further comprises a keypad, and the authentication server is further configured to authenticate a user based upon said biometric information and an alphanumeric password.

74. The system of claim 71, further wherein said biometric sensor is a fingerprint sensor, and the authentication server is configured to authenticate a user based upon finger print information provided by the fingerprint sensor.

75. The system of claim 71, further wherein said biometric sensor is a voice recognition recorder, and the authentication server is configured to authenticate a user based upon recorded voice information provided by the voice recognition recorder.

76. The system of claim 71, further wherein said biometric sensor is a retinal scan sensor, and the authentication server is configured to authenticate a user based upon retinal scan information provided by the retinal scan sensor.

77. The system of claim 71, further wherein said biometric sensor is a camera, and the authentication server is configured to authenticate a user based upon recognition of facial features in an image provided by the camera.

78. The system of claim 71, further wherein said biometric sensor is a digital pen and pad, and the authentication server is configured to authenticate a user based upon a handwriting sample provided by the digital pen and pad.

79. The system of claim 71, further wherein said biometric sensor is a three dimensional scanner sensor, and the authentication server is configured to authenticate a user based the depth and shape of the user'"'"'s ear canal provided by the three dimensional scanner sensor.

80. The system of claim 66, wherein the at least one operator provisioning center server contains provisioning information for a plurality of service providers.

81. The system of claim 80, wherein the VSIM server contains provisioning information for a plurality of service providers.

82. The system of claim 80, further comprising a plurality of operator provisioning centers in communication with the VSIM server.

83. The system of claim 82, wherein each of said plurality of operator provisioning centers contains provisioning information for a different service provider.

84. A cellular telephone for use with a cellular telephone network, comprising:

a memory unit; and

a processor configured to;

receive provisioning information from an external server via the cellular telephone network;

receive personal data from the external server via the cellular telephone network;

store received provisioning data and personal data in the memory unit; and

use the provisioning data stored in the memory unit for placing and receiving calls from the cellular telephone network.

85. The cellular telephone of claim 84, further comprising:

biometric sensor coupled to the processor;

wherein the processor is further configured to;

receive biometric data from the biometric sensor; and

transfer the received biometric data to the external server via the cellular data network.

86. The cellular telephone of claim 84, wherein the processor is further configured to:

receive a request for user authentication data from the external server via the cellular telephone network; and

prompt a user to use the biometric sensor to generate the biometric data in response to receiving the request for user authentication data.

87. The cellular telephone of claim 84, wherein the processor is further configured to transmit personal data stored in the memory unit to the external server via the cellular data network.

88. The cellular telephone of claim 84, wherein the processor is further configured to transmit personal data stored in the memory unit to the external server via the cellular data network when the personal data is modified by a user.

89. The cellular telephone of claim 84, wherein the processor is further configured to transmit personal data stored in the memory unit to the external server via the cellular data network at predetermined intervals.

90. The cellular telephone of claim 84, wherein the processor is further configured to transmit personal data stored in the memory unit to the external server via the cellular data network when prompted to do so by a user.

91. The cellular telephone of claim 84, wherein the received personal data comprises a phonebook and the processor is further configured to provide phonebook functionality using the personal data stored in the memory unit.

92. The cellular telephone of claim 84, wherein the received personal data comprises a ring tone and the processor is further configured to use the ring tone in the personal data stored in the memory unit.

93. The cellular telephone of claim 84, wherein the received personal data comprises a wall paper and the processor is further configured to use the wall paper in the personal data stored in the memory unit.

94. A method for provisioning a cellular telephone, comprising:

transmitting an authentication credential to an external server via a cellular telephone network;

receiving provisioning information via the cellular telephone network;

storing the received provisioning information in an internal memory unit; and

using the provisioning data stored in the memory unit for placing and receiving calls from the cellular telephone network.

95. The method of claim 94, further comprising:

receiving biometric data from a biometric sensor; and

transmitting the received biometric data to the external server via the cellular data network.

96. The method of claim 95, further comprising:

receiving a request for user authentication data from the external server via the cellular telephone network; and

prompting a user to use a biometric sensor to generate the biometric data in response to receiving the request for user authentication data.

97. The method of claim 94, further comprising transmitting personal data stored in the memory unit to the external server via the cellular data network.

98. The method of claim 94, further comprising transmitting personal data stored in the memory unit to the external server via the cellular data network when the personal data is modified by a user.

99. The method of claim 94, further comprising transmitting personal data stored in the memory unit to the external server via the cellular data network at predetermined intervals.

100. The method of claim 94, further comprising transmitting personal data stored in the memory unit to the external server via the cellular data network when prompted to do so by a user.

101. The method of claim 94, further comprising providing phonebook functionality using the personal data stored in the memory unit.

102. The method of claim 94, further comprising using a ring tone in the personal data stored in the memory unit.

103. The method of claim 94, further comprising using a wall paper in the personal data stored in the memory unit.

104. A computer readable memory having stored therein software instructions executable on a cellular telephone processor and configured to cause the processor to perform steps comprising:

transmitting an authentication credential to an external server via a cellular telephone network;

receiving provisioning information via the cellular telephone network;

storing the received provisioning information in an internal memory unit; and

using the provisioning data stored in the memory unit for placing and receiving calls from the cellular telephone network.

105. The computer readable medium of claim 104, wherein the stored software instructions are configured to cause the processor to further perform the steps of:

receiving biometric data from a biometric sensor;

transferring the received biometric data to an external server via the cellular data network.

106. The computer readable medium of claim 105, wherein the stored software instructions are configured to cause the processor to further perform the steps of:

receiving a request for user authentication data via the cellular telephone network; and

prompting a user to use the biometric sensor to generate the biometric data in response to receiving the request for user authentication data.

107. The computer readable medium of claim 104, wherein the stored software instructions are configured to cause the processor to further perform the step of transmitting personal data stored in memory to the external server via the cellular data network.

108. The computer readable medium of claim 104, wherein the stored software instructions are configured to cause the processor to further perform the step of transmitting personal data stored in memory to the external server via the cellular data network when the personal data is modified by a user.

109. The computer readable medium of claim 104, wherein the stored software instructions are configured to cause the processor to further perform the step of transmitting personal data stored in memory to the external server via the cellular data network at predetermined intervals.

110. The computer readable medium of claim 104, wherein the stored software instructions are configured to cause the processor to further perform the step of transmitting personal data stored in memory to the external server via the cellular data network when prompted to do so by a user.

111. The computer readable medium of claim 104, wherein the received personal data comprises a phonebook and the stored software instructions are configured to cause the processor to further perform the step of providing phonebook functionality using the personal data stored in memory.

112. The computer readable medium of claim 104, wherein the received personal data comprises a ring tone and the stored software instructions are configured to cause the processor to further perform the step of using the ring tone in the personal data stored in memory.

113. The computer readable medium of claim 104, wherein the received personal data comprises a wall paper and the stored software instructions are configured to cause the processor to further perform the step of using the wall paper in the personal data stored in memory.