METHODS AND APPARATUS OF OVER-THE-AIR PROGRAMMING OF A WIRELESS UNIT

• US 20090187972A1
• Filed: 03/30/2009
• Published: 07/23/2009
• Est. Priority Date: 09/30/1998
• Status: Active Grant

• Current Assignee: AT&T Intellectual Property I LP (AT&T, Inc.)
• Original Assignee: AT&T Intellectual Property I LP (AT&T, Inc.)
• Inventors: Link, Charles M. II, Hardin, Stephen Thomas, Klenzak, Megan Koch
• Granted Patent: US 8,170,533 B2
• Time in Patent Office: Days
• US Class Current: 726/3
• CPC Class Codes: H04L 63/0428 wherein the data content is protected, e.g. by encrypting or encapsulating the payload
• CPC Class Codes: H04W 12/03 Protecting confidentiality, e.g. by encryption
• CPC Class Codes: H04W 12/069 using certificates or pre-shared keys
• CPC Class Codes: H04W 88/02 Terminal devices

Abstract

Methods and apparatus for secure over-the-air (OTA) programming, and particularly, activation, of a wireless unit in a particular communications system. The unit stores a stored key having been generated by using a key algorithm (K-algorithm) with an identifier associated with the unit as an input to the K-algorithm. The unit may receive information such as parameters and a verification number from a communications system for the purpose of programming the unit. The verification number is generated by using an authorization algorithm (A-algorithm) having the parameters and a key as A-algorithm inputs. They key is generated by the K-algorithm having the identifier associated with the K-algorithm input. In response to the receipt of the parameters and the verification number, the wireless unit generates a trial verification number by using the A-algorithm with the parameters and the stored key as trial inputs. The unit compares the verification number to the trial verification number for a match. When finding the match, the unit uses the parameters for programming of the unit in the particular communications system. When failing to find the match, the unit fails to use the parameters for the programming.

Claims

1. A unit comprising:

memory for storing an unlock code with the unlock code being generated from an algorithm using a multiuse secret code for a particular network and an identifier of the unit;

a control for receipt of an input code; and

a processor being functionally connected to the control and to the memory to effect a comparison of the input code to the unlock code, and to effect an unlocking of the unit if the comparison results in a finding that the input code is substantially equal to the unlock code.

2. The unit of claim 1, wherein the identifier comprises an identifier unique to the unit.

3. The unit of claim 1, wherein the identifier comprises an electronic serial number of the unit.

4. The unit of claim 1, wherein the control is operative to receive the input code and a system identification number from a selected network;

and wherein the processor is operative, after the unlocking of the unit, to effect activation of the unit on the selected network based on the system identification number.

5. The unit of claim 1, wherein the algorithm used to generate the unlock code is run by a device other than the unit;

and wherein the unlock code is loaded by the device in the memory.

6. The unit of claim 1, wherein the unit comprises a wireless unit;

and wherein the identifier comprises an electronic serial number of the wireless unit.

7. The unit of claim 1, wherein the algorithm includes division of the secret code by the identifier of the unit.

8. The unit of claim 7, wherein the division of the secret code by the identifier of the unit results in a remainder and the remainder is the unlock code.

9. A method comprising:

generating an unlock code by using an algorithm with a multi-use secret code for a particular network and an identifier;

storing the unlock code in the unit; and

configuring the unit to be unlocked through input into the unit of an input code substantially equal to the unlock code,

whereby the unit is unlocked with the input of the input code substantially equal to the unlock code.

10. The method of claim 9, wherein generating the unlock code comprises causing the unit to generate the unlock code by using the algorithm to divide the secret code by the identifier.

11. The method of claim 10, wherein dividing the secret code by the identifier produces a remainder, and further including selecting the remainder as the unlock code.

12. The method of claim 9, further comprising:

receiving a system identification number from a selected network; and

based on unlocking of the unit, activating the unit on the selected network.

13. A method comprising:

generating an unlock code using an algorithm with a multi-use secret code for a particular network and an identifier;

receiving an input code;

comparing the input code to the unlock code; and

unlocking a unit if the input code is substantially equal to the unlock code.

14. The method of claim 13, wherein generating the unlock code comprises causing the unit to generate the unlock code by using the algorithm to divide the secret code by the identifier to obtain a remainder, and to select the remainder as the unlock code.

15. The method of claim 13, wherein dividing the secret code by the identifier produces a remainder, and further including selecting the remainder as the unlock code.

16. The method of claim 13, further including:

receiving a system identification number from a selected network; and

based on the unlocking of the unit, activating the unit on the selected network.

17. The method of claim 13, wherein receiving the input code comprises receiving the input code from a selected network;

and further including;

receiving a system identification number from the selected network; and

based on the unlocking of the unit, activating the unit on the selected network.

18. The method of claim 13, wherein generating the unlock code comprises causing the unlock code to be generated by a device other than the unit.

19. A computer-readable medium on which is stored a computer program, which when executed by a computer perform:

obtaining a multi-use secret code for a particular network;

using the secret code with an identifier in an algorithm to generate an unlock code;

loading a unit with the unlock code; and

configuring the unit so that the unit can be unlocked through input into the unit of an input code substantially equal to the unlock code.

20. The computer-readable medium of claim 19, wherein the algorithm comprises division of the secret code by the identifier of the unit.

21. The computer-readable medium of claim 20, wherein the division of the secret code by the identifier of the unit results in a remainder and the remainder is the unlock code.

22. A method comprising:

configuring a communication unit to be lockable;

configuring a communication unit to be unlockable; and

generating an unlock code for the communication unit using a multi-use secret code for a particular network and at least an identifier, wherein the unlock code is generated from an algorithm and is used to change the state of the communication unit from locked to unlocked.

23. The method of claim 22, wherein generating an unlock code for the communication unit further includes:

using an algorithm and the secret code in conjunction with the identifier.

24. The method of claim 22, wherein generating further includes:

using the secret code and at least the identifier in a mathematical operation to generate the unlock code.

25. The method of claim 24, wherein the mathematical operation is division, and the secret code is divided by the identifier.

26. The method of claim 25, wherein the unlock code is related to the remainder.

27. The method of claim 26, wherein the remainder is padded, and the padded remainder is the unlock code.

28. The method of claim 26, wherein the remainder is the unlock code.

29. The method of claim 26, wherein the communication unit is restricted from communications responsive to the communication unit being in a locked state.

30. The method of claim 26, wherein the communication unit can be used for communications responsive to the communication unit being in an unlocked state.

31. A lockable/unlockable communication unit, the communication unit comprising:

a memory having unlock code stored therein, the unlock code generated from an algorithm, which uses at least a multi-use secret code for a particular network and an identifier;

a control adapted to receive an input code; and

a processor in communication with the control and the memory, the processor adapted to compare the unlock code with the input code, and responsive to the input code being substantially equal to the unlock code, the processor effects a change of state from locked to unlocked.

32. The communication unit of claim 31, wherein the identifier comprises an identifier unique to the communication unit.

33. The communication unit of claim 31, wherein the identifier comprises an electronic serial number of the communication unit.

34. The unit of claim 31, wherein the communication unit is restricted from communicating when the communication unit is in a locked state.

35. A system comprising:

means for configuring a communication unit to be lockable;

means for configuring a communication unit to be unlockable; and

means for generating an unlock code for the communication unit using at least a multi-use secret code for a particular network and an identifier, wherein the unlock code is generated from an algorithm and is used to change the state of the communication unit from locked to unlocked.

36. The system of claim 35, wherein the means for generating the unlock code uses an algorithm and the secret code in conjunction with the identifier.

37. The system of claim 35, wherein the means for generating the unlock code uses the secret code and at least the identifier in a mathematical operation to generate the unlock code.

38. The system of claim 37, wherein the mathematical operation is division, and the secret code is divided by the identifier.

39. The system of claim 38, wherein the unlock code is related to the remainder.

40. The system of claim 39, wherein the remainder is padded, and the padded remainder is the unlock code.

41. The system of claim 39, wherein the remainder is the unlock code.

42. The system of claim 35, wherein the communication unit is restricted from communications responsive to the communication unit being in a locked state.

43. The system of claim 35, wherein the communication unit can be used for communications responsive to the communication unit being in an unlocked state.

44. A computer-readable medium on which is stored a computer program, the computer program comprising instructions, which when executed by a computer perform:

configuring a communication unit to be lockable;

configuring a communication unit to be unlockable; and

generating an unlock code for the communication unit using at least a multi-use secret code for a particular network and an identifier, wherein the unlock code is generated from an algorithm and is used to change the state of the communication unit from locked to unlocked.

45. The computer-readable medium of claim 44, wherein generating an unlock code for the communication unit further includes:

using an algorithm and the secret code in conjunction with the identifier.

46. The computer-readable medium of claim 44, wherein generating an unlock code for the communication unit further includes:

using the secret code and at least the identifier in a mathematical operation to generate the unlock code.

47. The computer-readable medium of claim 46, wherein the mathematical operation is division, and the secret code is divided by the identifier.

48. The computer-readable medium of claim 47, wherein the unlock code is related to the remainder.

49. The computer-readable medium of claim 48, wherein the remainder is padded, and the padded remainder is the unlock code.

50. The computer-readable medium of claim 49, wherein the remainder is the unlock code.