Service Processor Configurations for Enhancing or Augmenting System Software of a Mobile Communications Device

• US 20140075567A1
• Filed: 11/18/2013
• Published: 03/13/2014
• Est. Priority Date: 01/28/2009
• Status: Abandoned Application

• Current Assignee: Headwater Research LLC (Greg Raleigh)
• Original Assignee: Headwater Partners I LLC (Greg Raleigh)
• Inventors: Raleigh, Gregory G., Lavine, James, Tellado, Jose, Fitzgerald, James, Hunsperger, Nathaniel, Nguyen, Vien-Phuong
• Application Number:
  US14/083,324
• Publication Number:
  US 20140075567A1
• Time in Patent Office: Days
• US Class Current: 726/26
• CPC Class Codes: G06F 21/64 Protecting data integrity, e.g. using checksums, certificates or signatures
• CPC Class Codes: G06Q 10/06375 Prediction of business process outcome or impact based on a proposed change
• CPC Class Codes: G06Q 20/102 Bill distribution or payments
• CPC Class Codes: G06Q 20/20 Point-of-sale [POS] network systems
• CPC Class Codes: G06Q 20/40 Authorisation, e.g. identification of payer or payee, verification of customer or shop credentials; Review and approval of payers, e.g. check credit lines or negative lists
• CPC Class Codes: G06Q 30/0207 Discounts or incentives, e.g. coupons or rebates
• CPC Class Codes: G06Q 30/0283 Price estimation or determination
• CPC Class Codes: G06Q 30/0284 Time or distance, e.g. usage of parking meters or taximeters
• CPC Class Codes: G06Q 30/04 Billing or invoicing
• CPC Class Codes: G06Q 30/0601 Electronic shopping [e-shopping]
• CPC Class Codes: G06Q 40/00 Finance; Insurance; Tax strategies; Processing of corporate or income taxes
• CPC Class Codes: G06Q 40/12 Accounting
• CPC Class Codes: H04L 12/14 Charging , metering or billing arrangements for data wireline or wireless communications
• CPC Class Codes: H04L 41/0893 Assignment of logical groups to network elements
• CPC Class Codes: H04L 41/0894 Policy-based network configuration management
• CPC Class Codes: H04L 41/5003 Managing SLA; Interaction between SLA and QoS
• CPC Class Codes: H04L 41/5025 by proactively reacting to service quality change, e.g. by reconfiguration after service quality degradation or upgrade
• CPC Class Codes: H04L 47/2408 for supporting different services, e.g. a differentiated services [DiffServ] type of service
• CPC Class Codes: H04M 15/00 Arrangements for metering, time-control or time indication ; Metering, charging or billing arrangements for voice wireline or wireless communications, e.g. VoIP
• CPC Class Codes: H04M 15/58 based on statistics of usage or network monitoring
• CPC Class Codes: H04M 2215/0188 : Network monitoring; statistics on usage on called/calling number
• CPC Class Codes: H04W 12/10 : Integrity
• CPC Class Codes: H04W 12/12 : Detection or prevention of fraud
• CPC Class Codes: H04W 12/35 : Protecting application or service provisioning, e.g. securing SIM application provisioning
• CPC Class Codes: H04W 12/45 : using multiple identity modules
• CPC Class Codes: H04W 28/02 : Traffic management, e.g. flow control or congestion control
• CPC Class Codes: H04W 4/24 : Accounting or billing
• CPC Class Codes: H04W 8/02 : Processing of mobility data, e.g. registration information at HLR [Home Location Register] or VLR [Visitor Location Register]; Transfer of mobility data, e.g. between HLR, VLR or external networks

Abstract

A device comprising non-volatile memory capable of being partitioned into first and second partitions, the first partition for storing device system software, the second partition for storing a service processor and having one or more system execution properties for enhancing or augmenting the device system software, and comprising one or more processors for verifying integrity of the device system software using a first security element, verifying integrity of the service processor using a second security element, obtaining the service processor from the non-volatile memory, executing the obtained service processor, and updating, installing, removing, or modifying the service processor in the second partition of the non-volatile memory without affecting the device system software in the first partition.

Claims

1. A communications device, comprising:

one or more non-volatile memories capable of being partitioned into at least a first partition and a second partition, the first partition for storing at least a portion of device system software, the at least a portion of device system software being associated with a first security element, the second partition for storing at least a portion of a service processor, the at least a portion of the service processor having one or more system execution properties enabling the at least a portion of the service processor to enhance or augment the device system software, the at least a portion of the service processor being associated with a second security element; and

one or more processors configured to execute one or more instructions that, when executed by the one or more processors, cause the one or more processors to;

verify an integrity of the at least a portion of device system software using the first security element,

verify an integrity of the at least a portion of the service processor using the second security element,

obtain the at least a portion of the service processor from the one or more non-volatile memories,

execute the obtained at least a portion of the service processor, thereby enhancing or augmenting the device system software, and

update, install, remove, or modify the at least a portion of the service processor in the second partition of the one or more non-volatile memories without affecting the at least a portion of the device system software in the first partition.

2. The communications device recited in claim 1, wherein the first security element or the second security element comprises a certificate, a key, a hash, a chained hash, a credential, or a signature.

3. The communications device recited in claim 1, wherein the one or more non-volatile memories are configured to store the first security element or the second security element.

4. The communications device recited in claim 1, wherein the first security element and the second security element are stored in a system file.

5. The communications device recited in claim 1, wherein the first security element and the second security element are managed by or associated with an original equipment manufacturer (OEM), a carrier, a system installation function, a recovery function, or a combination of these.

6. The communications device recited in claim 1, wherein the service processor comprises a kernel or framework component.

7. The communications device recited in claim 1, wherein a service processor component is associated with a system user identifier (ID), a system group ID, or a combination of these.

8. The communications device recited in claim 1, wherein the second partition has lower security than the first partition.

9. The communications device recited in claim 1, wherein the second partition is a subpartition of the first partition.

10. The communications device recited in claim 1, wherein, when executed by the one or more processors, the one or more instructions further cause the one or more processors to create the second partition during an installation of the at least a portion of the service processor.

11. The communications device recited in claim 1, wherein the first partition contains a symlink to the second partition.

12. The communications device recited in claim 1, wherein the first partition and the second partition are associated using one or more hooks, one or more callbacks, one or more symlinks, or based on software code instructions.

13. The communications device recited in claim 1, wherein the first partition is part of a system partition, and wherein the second partition is associated with a service provider, a carrier, a mobile virtual network operator (MVNO), or a mobile virtual network enabler (MVNE).

14. The communications device recited in claim 1, wherein the second partition is associated with a service provider, a carrier, a mobile virtual network operator (MVNO), or a mobile virtual network enabler (MVNE).

15. The communications device recited in claim 1, wherein the second partition is at least a portion of a carrier partition or at least a portion of an OEM partition.

16. The communications device recited in claim 1, wherein the second partition is at least a portion of a user partition or is at least a portion of a data partition.

17. The communications device recited in claim 1, wherein the at least a portion of the service processor is a first portion of the service processor, and wherein the one or more non-volatile memories are further capable of being partitioned into a third partition, the third partition for storing a second portion of the service processor.

18. The communications device recited in claim 17, wherein the second portion of the service processor is associated with a third security element.

19. The communications device recited in claim 17, wherein, when executed by the one or more processors, the one or more instructions further cause the one or more processors to update, install, remove, or modify the second portion of the service processor in the third partition of the one or more non-volatile memories without affecting the first portion of the service processor in the second partition.

20. The communications device recited in claim 1, wherein the at least a portion of the service processor at least assists in implementing a service policy or a service plan.

21. The communications device recited in claim 20, wherein the service policy or a service plan at least assists to manage at least an aspect of the communications device, monitor usage of a network or of a service by the communications device, account for usage of the network or of the service by the communications device, control usage of the network or of the service by the communications device, provide a notification through a user interface of the communications device, or a combination of these.

22. The communications device recited in claim 1, wherein, when executed by the one or more processors, the one or more instructions further cause the one or more processors to update or modify the at least a portion of device system software using the first security element.

23. The communications device recited in claim 1, wherein verify the integrity of the at least a portion of the service processor using the second security element comprises sign, encrypt, decrypt, or hash the at least a portion of the service processor using the second security element.

24. The communications device recited in claim 1, wherein verify the integrity of the at least a portion of the service processor using the second security element comprises verify the integrity of the at least a portion of the service processor using the second security element before, during, or after a download of the at least a portion of the service processor.

25. The communications device recited in claim 1, wherein verify the integrity of the at least a portion of the service processor using the second security element comprises verify the integrity of the at least a portion of the service processor using the second security element before, during, or after an installation of the at least a portion of the service processor.

26. The communications device recited in claim 1, wherein verify the integrity of the at least a portion of the service processor using the second security element comprises verify the integrity of the at least a portion of the service processor using the second security element before, during, or after an update of the at least a portion of the service processor.

27. The communications device recited in claim 1, wherein verify the integrity of the at least a portion of the service processor using the second security element comprises verify the integrity of the at least a portion of the service processor using the second security element before, during, or after a launch, a load, or an execution of the at least a portion of the service processor.

28. The communications device recited in claim 1, wherein update, install, remove, or modify the at least a portion of the service processor in the second partition of the one or more non-volatile memories without affecting the at least a portion of the device system software in the first partition comprises update or modify a first version of the service processor to provide a second version of the service processor without updating or modifying the system software.

29. The communications device recited in claim 1, wherein update, install, remove, or modify the at least a portion of the service processor in the second partition of the one or more non-volatile memories without affecting the at least a portion of the device system software in the first partition comprises install or remove the at least a portion of the service processor or a second portion of the service processor without updating or modifying the system software.

30. A non-transitory computer-readable storage medium storing one or more machine-executable instructions that, when executed by one or more processors of a communications device, cause the one or more processors to:

verify an integrity of at least a portion of device system software using a first security element, the at least a portion of the device system software being stored in a first partition of one or more non-volatile memories;

verify an integrity of at least a portion of a service processor using a second security element, the at least a portion of the service processor being stored in a second partition of the one or more non-volatile memories, the at least a portion of the service processor having one or more system execution properties enabling the at least a portion of the service processor to enhance or augment the device system software;

obtain the at least a portion of the service processor from the one or more non-volatile memories;

execute the obtained at least a portion of the service processor, thereby enhancing or augmenting the device system software; and

update, install, remove, or modify the at least a portion of the service processor in the second partition of the one or more non-volatile memories without affecting the at least a portion of the device system software in the first partition.