SIM Level Mobile Security

• US 20140057597A1
• Filed: 03/12/2013
• Published: 02/27/2014
• Est. Priority Date: 08/25/2012
• Status: Active Grant

• Current Assignee: T-Mobile USA, Inc. (Deutsche Telekom AG)
• Original Assignee: T-Mobile USA, Inc. (Deutsche Telekom AG)
• Inventors: Velusamy, Senthil Kumar Mulluppadi, Farsai, Steven S.
• Granted Patent: US 10,075,848 B2
• Time in Patent Office: Days
• US Class Current: 455/411
• CPC Class Codes: H04W 12/08 Access security
• CPC Class Codes: H04W 12/12 Detection or prevention of fraud
• CPC Class Codes: H04W 12/126 Anti-theft arrangements, e.g. protection against subscriber identity module [SIM] cloning

Abstract

Mobile security techniques may protect information stored on a subscriber identity module (SIM) card as well as services that are accessible through the SIM card from unauthorized use. The techniques include receiving a service request to perform a security function at a server. The security function may affect a service provided to a mobile device by a telecommunication network, in which the mobile device obtains the service using a SIM card. The techniques further include performing the security function. The performance of the SIM function may be terminated in response to the server receiving a reversion command or an expiration of a predetermined time period.

Claims

1. One or more computer storage devices storing computer-executable instructions that, when executed, cause one or more processors to perform acts comprising:

receiving a service request to perform a security function that affects a service provided to a mobile device by a telecommunication network, the service being provided by the telecommunication network to the mobile device based on a subscriber identity module (SIM) card;

performing the security function that affects the service provided to the mobile device; and

terminating the security function in response to receiving a reversion command or an expiration of a predetermined time period.

2. The one or more computer storage devices of claim 1, further comprising sending an activation command that triggers the mobile device to perform an action that is one of displaying information that indicates a nearest location for returning the mobile device, displaying an option for a user to enter a current address for transmission to an owner of the mobile device, or calling a predetermined number stored in the mobile device.

3. The one or more computer storage devices of claim 2, wherein the activation commands triggers the mobile device to perform the action in response to the mobile device detecting at least one of a change in a geolocation of the mobile device, an attempt to unlock the mobile device, or a detected movement within a predetermined range of the mobile device.

4. The one or more computer storage devices of claim 1, further comprising sending an activation command that triggers the mobile device to at least one of disable a power port of the mobile device to prevent charging of a battery of the mobile device, disable a communication port of the mobile device to prevent loading of applications into a memory of the mobile device, or disable a boot loader of the mobile device to prevent an updating of an operating system of the mobile device.

5. The one or more computer storage devices of claim 1, further comprising sending an activation command that triggers the mobile device to sound an audible alarm, report a geolocation of the mobile device to a client device, lock the mobile device with an authentication credential, display a message, or delete data stored in a memory location of the mobile device.

6. The one or more computer storage devices of claim 1, wherein the receiving includes receiving the service request from a client device that is operated by a service representative of the telecommunication network or an authorized user of the SIM card.

7. The one or more computer storage devices of claim 1, wherein the SIM card is removed from another mobile device and a current user of the mobile device is using the SIM card to obtain service from the telecommunication network without authorization.

8. The one or more computer storage devices of claim 1, wherein the security function includes a forwarding of an incoming voice call or text message to the mobile device to an alternative telephone number, a blocking of an incoming voice call to or an outgoing voice call from the mobile device, a blocking of an incoming text message to or an outgoing text message from the mobile device, or a locking of the SIM card.

9. The one or more computer storage devices of claim 8, wherein the blocking of an incoming voice call results in a routing of the incoming call to a voicemail service or providing a message to a caller making the incoming voice call that a telephone number associated with the SIM card is not available.

10. The one or more computer storage devices of claim 8, wherein the locking of the SIM card includes sending a locking command to the mobile device that triggers the SIM card to protect one or more services that are accessible through the SIM card or data stored in the SIM card with an authentication credential.

11. The one or more computer storage devices of claim 1, wherein the performing include performing the security function in response to determining that one or more of a plurality of preconditions are satisfied.

12. The one or more computer storage devices of claim 11, wherein the plurality of preconditions including an authentication that a requester making the service request is an authorized user of the mobile device, a confirmation that the user is current on payments to a telecommunication carrier operating the telecommunication network, and that the mobile device supports the security function.

13. The one or more computer storage devices of claim 1, wherein the request includes a time duration constraint on a performance of the security function, and wherein the performing including performing the security function according to the time duration constraint.

14. A computer-implemented method, comprising:

receiving a service request to perform a security function at a security server, the security function affecting a service provided to a mobile device by a telecommunication network based on a subscriber identity module (SIM) card;

performing the security function that affects the service provided to the mobile device; and

terminating the security function in response to receiving a reversion command or an expiration of a predetermined time period,

wherein at least one of the service request or the reversion command is received from a client device.

15. The computer-implemented method of claim 14, further comprising sending an activation command that triggers the mobile device to perform at least one of displaying information that indicates a nearest location for returning the mobile device, displaying an option for an additional user to enter a current address for transmission to an owner of the mobile device, or calling a predetermined number stored in the mobile device.

16. The computer-implemented method of claim 15, wherein the activation commands triggers the mobile device to perform the action in response to the mobile device detecting at least one of a change in a geolocation of the mobile device, an attempt to unlock the mobile device, or a detected movement within a predetermined range of the mobile device.

17. The computer-implemented method of claim 14, further comprising sending an activation command that triggers the mobile device to at least one of disable a power port of the mobile device to prevent charging of a battery of the mobile device, disable a communication port of the mobile device to prevent loading of applications into a memory of the mobile device, or disable a boot loader of the mobile device to prevent an updating of an operating system of the mobile device.

18. The computer-implemented method of claim 14, further comprising sending an activation command that triggers the mobile device to sound an audible alarm, report a geolocation of the mobile device to the client device, lock the mobile device with an authentication credential, display a message, or delete data stored in a memory location of the mobile device.

19. A mobile device, comprising:

one or more processors; and

memory that includes a plurality of computer-executable components comprising;

a locking component that locks a subscriber identity module (SIM) card installed on the mobile device in response to a locking command from a security server of a telecommunication network; and

a security component that performs an action in response to an activation command from the security server, the action including disabling a power port of the mobile device to prevent charging of a battery of the mobile device, disabling a communication port of the mobile device to prevent loading of applications into the memory of the mobile device, or disabling a boot loader of the mobile device to prevent an updating of an operating system of the mobile device.

20. The mobile device of claim 19, wherein the security component further performs an additional action in response to detecting at least one of a change in a geolocation of the mobile device, an attempt to unlock the mobile device, or a detected movement within a predetermined range of the mobile device, the additional action including displaying information that indicates a nearest location for returning the mobile device, displaying an option for a user to enter a current address for transmission to an owner of the mobile device, or calling a predetermined number stored in the mobile device.