System and Method for Securing a Personalized Indicium Assigned to a Mobile Communications Device

• US 20110211530A1
• Filed: 04/21/2011
• Published: 09/01/2011
• Est. Priority Date: 11/24/2004
• Status: Active Grant

• Current Assignee: Malikie Innovations Limited (Key Patent Innovations Limited)
• Original Assignee: Blackberry Limited
• Inventors: Gao, Wen, Bajar, David, Lewis, Allan David, Plumb, Marc, Adams, Neil Patrick, Godfrey, James, Whittington, Graeme, Little, Herb A., Brown, Michael Kenneth
• Granted Patent: US 8,400,970 B2
• Time in Patent Office: Days
• US Class Current: 370/328
• CPC Class Codes: H04L 63/0853 using an additional device, e.g. smartcard, SIM or a different communication terminal cryptographic mechanisms or cryptographic arrangements for entity authentication involving additional secure or trusted devices H04L9/3234
• CPC Class Codes: H04W 12/069 using certificates or pre-shared keys
• CPC Class Codes: H04W 12/122 Counter-measures against attacks; Protection against rogue devices
• CPC Class Codes: H04W 12/126 Anti-theft arrangements, e.g. protection against subscriber identity module [SIM] cloning

Abstract

In one embodiment, a method operable on a mobile communications device is disclosed, the method comprising generating an authentication key for securing a personalized indicium assigned to the mobile communications device, wherein the personalized indicium comprises a Personal Information Number (PIN) that is mapped to at least one identifier associated with the mobile communications device; transmitting a registration request to a network node operable with a wireless network, the registration request having a registration request payload including the authentication key; receiving a challenge message from the network node, the challenge message generated when the network node detects a change of the IP address associated with the mobile communications device, and responsive to receiving the challenge message, executing a challenge response including an authentication value of a challenge string transmitted in the challenge message, wherein the authentication value is created using the authentication key.

Claims

1. A mobile communications device comprising:

a processor configured to control at least one of a plurality of sub-systems for communicating with a network node operable with a wireless network;

the processor further configured to control at least one of the plurality of sub-systems for generating an authentication key for securing a personalized indicium assigned to the mobile communications device, wherein the personalized indicium comprises a Personal Information Number (PIN) that is mapped to at least one identifier associated with the mobile communications device;

the processor further configured to control at least one of the plurality of sub-systems for transmitting a registration request to the network node, the registration request having a registration request payload including the authentication key;

the processor further configured to control at least one of the plurality of sub-systems for receiving a challenge message from the network node, the challenge message generated when the network node detects a change of the IP address associated with the mobile communications device,

the processor further configured to control at least one of the plurality of sub-systems for executing a challenge response to the challenge message, the challenge response including an authentication value of a challenge string transmitted in the challenge message, wherein the authentication value is created using the authentication key.

2. The mobile communications device of claim 1, wherein the wireless network is a network selected from the group consisting of a General Packet Radio Service (GPRS) network, an Enhanced Data Rates for Global System for Mobile Communications (GSM) Evolution (EDGE) network, a 3^rd Generation (3G) network, an Integrated Digital Enhanced Network (IDEN), a Code Division Multiple Access (CDMA) network and a Universal Mobile Telecommunications System (UMTS) network.

3. The mobile communications device of claim 1, wherein the at least one identifier comprises at least one of an International Mobile station Equipment Identity (IMEI) parameter, an International Mobile Subscriber Identity (IMSI) parameter, an Electronic Serial Number (ESN) parameter and a Mobile Identification Number (MIN) parameter.

4. The mobile communications device of claim 1, wherein the processor is further configured to control at least one of the plurality of sub-systems for generating a challenge request for transmitting to the network node upon acquiring a new Internet Protocol (IP) address.

5. The mobile communications device of claim 1, wherein the processor is further configured to control at least one of the plurality of sub-systems for ceasing transmission of packets to the network node upon receiving the challenge message.

6. The mobile communications device of claim 5, wherein the processor is further configured to control at least one of the plurality of sub-systems for commencing transmission of packets to the network node upon receiving an acknowledgment from the network node that the PIN is legitimately bound to the mobile communications device.

7. A method operable on a mobile communications device, the method comprising:

generating an authentication key for securing a personalized indicium assigned to the mobile communications device, wherein the personalized indicium comprises a Personal Information Number (PIN) that is mapped to at least one identifier associated with the mobile communications device;

transmitting a registration request to a network node operable with a wireless network, the registration request having a registration request payload including the authentication key;

receiving a challenge message from the network node, the challenge message generated when the network node detects a change of the IP address associated with the mobile communications device, and

responsive to receiving the challenge message, executing a challenge response including an authentication value of a challenge string transmitted in the challenge message, wherein the authentication value is created using the authentication key.

8. The method according to claim 7, wherein the wireless network is a network selected from the group consisting of a General Packet Radio Service (GPRS) network, an Enhanced Data Rates for Global System for Mobile Communications (GSM) Evolution (EDGE) network, a 3^rd Generation (3G) network, an Integrated Digital Enhanced Network (IDEN), a Code Division Multiple Access (CDMA) network and a Universal Mobile Telecommunications System (UMTS) network.

9. The method according to claim 7, wherein the at least one identifier comprises at least one of an International Mobile station Equipment Identity (IMEI) parameter, an International Mobile Subscriber Identity (IMSI) parameter, an Electronic Serial Number (ESN) parameter and a Mobile Identification Number (MIN) parameter.

10. The method according to claim 7, further comprising generating a challenge request for transmitting to the network node upon acquiring a new Internet Protocol (IP) address.

11. The method according to claim 7, further comprising ceasing transmission of packets to the network node upon receiving the challenge message.

12. The method according to claim 11, further comprising commencing transmission of packets to the network node upon receiving an acknowledgment from the network node that the PIN is legitimately bound to the mobile communications device.