METHOD AND SYSTEM FOR DELIVERING A COMMAND TO A MOBILE DEVICE

• US 20100291899A1
• Filed: 07/10/2009
• Published: 11/18/2010
• Est. Priority Date: 05/12/2009
• Status: Active Grant

• Current Assignee: IQVIA, Inc. (IQVIA Holdings, Inc.)
• Original Assignee: Diversinet Corporation
• Inventors: MACHANI, Salah E.
• Granted Patent: US 9,344,896 B2
• Time in Patent Office: Days
• US Class Current: 455/411
• CPC Class Codes: H04L 63/0838 using one-time-passwords
• CPC Class Codes: H04W 12/06 Authentication
• CPC Class Codes: H04W 12/082 using revocation of authorisation
• CPC Class Codes: H04W 12/12 Detection or prevention of fraud
• CPC Class Codes: H04W 88/02 Terminal devices

Abstract

A method and system for delivering a command to a mobile device is provided. A one-time password is generated using a token shared with a mobile device and one of a challenge and an input string. The one-time password and a command are transmitted, along with the challenge or the input string, to the mobile device for execution thereon.

Claims

1. A computerized method for delivering a command to a mobile device, comprising:

generating a one-time password using a token shared with a mobile device and one of a challenge and an input string; and

transmitting said one-time password and said one of said challenge and said input string, along with a command, to said mobile device.

2. The method of claim 1, further comprising, prior to said generating:

receiving a request to transmit a command to said mobile device.

3. The method of claim 2, further comprising, prior to said generating:

receiving said one of said challenge and said input string.

4. The method of claim 1, wherein said command is a wipe data command.

5. The method of claim 4, wherein said wipe data command specifies that all data in a memory of said mobile device is to be erased.

6. The method of claim 4, wherein said wipe data command specifies a subset of data on said mobile device is to be erased.

7. The method of claim 1, wherein said command is a wipe security elements command.

8. The method of claim 7, wherein said wipe security elements command specifies a subset of security elements on said mobile device to be erased.

9. The method of claim 1, wherein said command directs said mobile device to establish a call.

10. The method of claim 9, wherein said call is a data call.

11. The method of claim 9, wherein said call is a voice call.

12. The method of claim 1, wherein said command directs said mobile device to advance to a locked state.

13. The method or claim 1, wherein said command directs said mobile device to advance an application to a locked state.

14. The method of claim 1, wherein said transmitting is performed independent of communications from said mobile device.

15. The method of claim 14, wherein said transmitting comprises transmitting via short message service.

16. The method of claim 1, wherein said token is a soft token.

17. The method of claim 1, wherein said input string is a random sequence number.

18. A system for delivering a command to a mobile device, comprising:

a user database storing a plurality of tokens, each of said tokens being shared with a mobile device;

an input interface for receiving a request to send a command to a mobile device;

a one-time password generator for generating a one-time password using one of said tokens shared with said mobile device and one of a challenge and an input string; and

a communications module for communicating said one-time password, said command and said one of said challenge and said input string to said mobile device.

19. The system of claim 18, further comprising:

a software archive storing token agents for installation on mobile devices.

20. The system of claim 18, wherein said input interface permits entry of said one of said challenge and said input string.

21. The system of claim 18, wherein said tokens arc soft tokens.

22. The system of claim 18, wherein said input interface is provided by a web server.

23. The system of claim 18, wherein said communications module includes a short message service server for communicating said command.

24. The system of claim 18, wherein said user database stores login credentials and information regarding mobile devices registered to each user.