PORTABLE TELECOMMUNICATIONS APPARATUS

• US 20100005313A1
• Filed: 05/22/2007
• Published: 01/07/2010
• Est. Priority Date: 05/24/2006
• Status: Active Grant

• Current Assignee: Nokia Corporation
• Original Assignee: Nokia Corporation
• Inventors: Dai, Jason
• Granted Patent: US 8,452,979 B2
• Time in Patent Office: Days
• US Class Current: 713/185
• CPC Class Codes: H04L 63/0853 using an additional device, e.g. smartcard, SIM or a different communication terminal cryptographic mechanisms or cryptographic arrangements for entity authentication involving additional secure or trusted devices H04L9/3234
• CPC Class Codes: H04M 1/675 the user being required to insert a coded card, e.g. a smart card carrying an integrated circuit chip
• CPC Class Codes: H04M 1/724 User interfaces specially adapted for cordless or mobile telephones
• CPC Class Codes: H04W 12/06 Authentication
• CPC Class Codes: H04W 12/08 Access security
• CPC Class Codes: H04W 12/126 Anti-theft arrangements, e.g. protection against subscriber identity module [SIM] cloning
• CPC Class Codes: H04W 12/48 using secure binding, e.g. securely binding identity modules to devices, services or applications
• CPC Class Codes: H04W 74/00 Wireless channel access
• CPC Class Codes: H04W 88/02 Terminal devices

Abstract

Portable telecommunications apparatus having one or more functionalities including providing user access to a telecommunications network, the portable telecommunications apparatus comprising integrated circuit card (ICC) reader circuitry, storage circuitry and processing circuitry, wherein the ICC reader circuitry is configured to communicate with one or more network-access ICCs; the storage circuitry is arranged to comprise a list of at least one network-access ICC authorised for use with the apparatus; and wherein the processing circuitry is arranged to undertake an authentication process on removable storage circuitry in communication with the apparatus to determine whether or not the security circuitry is authenticated for use with the apparatus; to allow the authorisation of network—access ICCs in the storage circuitry according to whether authenticated security circuitry is in communication with the apparatus; and to permit a user access to the one or more functionalities of the apparatus according to whether an authorised network-access ICC is in communication with the ICC reader circuitry.

Claims

1. Portable telecommunications apparatus having one or more functionalities including providing user access to a telecommunications network, the portable telecommunications apparatus comprising integrated circuit card (ICC) reader circuitry and processing circuitry, wherein

the ICC reader circuitry is configured to communicate with one or more network-access ICCs;

and

the processing circuitry is arranged

to undertake an authentication process on removable security circuitry in communication with the apparatus to determine whether or not the security circuitry is authenticated for use with the apparatus;

to allow the authorisation of network-access ICCs in storage circuitry according to whether authenticated security circuitry is in communication with the apparatus; and

to permit a user access to the one or more functionalities of the apparatus according to whether an authorised network-access ICC is in communication with the ICC reader circuitry.

2. The telecommunications apparatus of claim 1 including indication circuitry being arranged to be actuatable by the processing circuitry to communicate to a user a warning message upon detection by the processing circuitry of an unauthorised network-access ICC in communication with the ICC reader circuitry.

3. The telecommunications apparatus of claim 1 including indication circuitry being arranged to be actuatable by the processing circuitry to communicate to the user a warning message upon detection by the processing circuitry of unauthenticated security circuitry in communication with the apparatus.

4. The telecommunications apparatus of claim 1 wherein the processing circuitry is arranged to be operable, in the event of detection of an unauthorised network access ICC or unauthenticated security circuitry occurring a predetermined number of times, to destroy some or all of the contents of the storage circuitry.

5. The telecommunications apparatus of claim 1 wherein the processing circuitry is arranged to allow the de-authorisation of network-access ICCs in the storage circuitry according to whether authenticated security circuitry is in communication with the apparatus.

6. The telecommunications apparatus of claim 1 wherein the processing circuitry is arranged to be operable to de-authorise an authorised network-access ICC upon receipt from the network of an indication that the apparatus is registered with the network as being lost or stolen.

7. The telecommunications apparatus of claim 1 wherein the processing circuitry is arranged to be operable to de-authorise an authorised network-access ICC upon receipt via the network of a specific indication pre-configured by the user.

8. The telecommunications apparatus of claim 1 wherein the storage circuitry comprises immutable storage circuitry configured to store a public key of a signature key pair and a private key of an encryption key pair

9. The telecommunications apparatus of claim 8 wherein the security circuitry includes a key certificate which is encrypted using a public key of the encryption key pair and signed using a private key of the signature key pair.

10. The telecommunications apparatus of claim 9 wherein, during the authentication process, the processing circuitry is arranged to be operable to use the private key of the encryption key pair to attempt to decrypt the content of the key certificate.

11. The telecommunications apparatus of claim 10 wherein, following successful decryption, the processing circuitry is arranged to be operable to use the public key of the signature key pair to determine whether or not a signature of the key certificate is authentic.

12. The telecommunications apparatus of claim 11 wherein the security circuitry is authenticated if the key certificate is successfully decrypted and its signature is authentic.

13. The telecommunications apparatus of claim 1 wherein the processing circuitry includes a security module being arranged to be operable to undertake the authentication process.

14. The telecommunications apparatus of claim 1 wherein the removable security circuitry includes a security ICC, the ICC reader circuitry being configured to read the security ICC.

15. The telecommunications apparatus of claim 1 comprising non-user-removable storage circuitry.

16. The telecommunications apparatus of claim 1 wherein the storage circuitry is removable storage circuitry arranged for use with the apparatus.

17. The telecommunications apparatus of claim 1 wherein the storage circuitry is comprised on a remote electronic apparatus, and the telecommunications apparatus is arranged to communicate with the storage circuitry of the remote electronic apparatus to allow authorisation of ICCs as authorised network-access ICCs.

18. The telecommunications apparatus of claim 1 wherein the storage circuitry is comprised on a remote electronic apparatus, and the telecommunications apparatus is arranged to communicate with the storage circuitry of the remote electronic apparatus to allow access to a list of authorised network-access ICCs.

23. A network element being configured for use with the portable telecommunications apparatus of claim 1.

24. An apparatus comprising storage circuitry, the apparatus arranged to communicate with the apparatus of claim 1 to allow authorisation of ICCs as authorised network-access ICCs.

25. An apparatus comprising storage circuitry, the apparatus arranged to communicate with the apparatus of claim 1 to allow access to a list of authorised network-access ICCs.

19. A software module for portable telecommunications apparatus, the apparatus having one or more functionalities including providing user access to a telecommunications network, the software module comprising

communication code stored on one or more memories, the code being arranged to communicate with integrated circuit card (ICC) reader circuitry and storage circuitry, the ICC reader circuitry being configured to communicate with one or more network-access ICCs, the storage circuitry being arranged to comprise a list of at least one network-access ICC authorised for use with the apparatus;

and

processing code stored on one or more memories, the code being arranged

to undertake an authentication process on removable security circuitry in communication with the ICC reader circuitry to determine whether or not the security circuitry is authenticated for use with the apparatus;

to allow the authorisation of network-access ICCs in the storage circuitry according to whether authenticated security circuitry is in communication with the apparatus; and

to permit access to the one or more functionalities of the apparatus according to whether an authorised network-access ICC is in communication with the ICC reader circuitry.

20. Portable telecommunications apparatus including the software module of claim 19.

21. A method of configuring portable telecommunications apparatus having one or more functionalities including providing user access to a telecommunications network, the method comprising

authorising one or more network-access ICCs for use with the telecommunications apparatus when removable authenticated security circuitry is in communication with the telecommunications apparatus;

disestablishing communication between the security circuitry and the apparatus;

establishing communication between a said authorised network-access ICC and the ICC reader circuitry.

22. The method of claim 21 including de-authorising one or more authorised network-access ICCs when authenticated security circuitry is in communication with the apparatus.

26. A method of assembling a portable telecommunications apparatus, the apparatus having one or more functionalities including providing user access to a telecommunications network, the portable telecommunications apparatus comprising integrated circuit card (ICC) reader circuitry and processing circuitry, wherein

the ICC reader circuitry is configured to communicate with one or more network-access ICCs;

and

the processing circuitry is arranged

to undertake an authentication process on removable security circuitry in communication with the apparatus to determine whether or not the security circuitry is authenticated for use with the apparatus;

to allow the authorisation of network-access ICCs in storage circuitry according to whether authenticated security circuitry is in communication with the apparatus; and

to permit a user access to the one or more functionalities of the apparatus according to whether an authorised network-access ICC is in communication with the ICC reader circuitry,

the method comprising assembling together the integrated circuit card (ICC) reader circuitry and processing circuitry.