MOBILE DEVICE SECURITY

• US 20140335825A1
• Filed: 04/30/2014
• Published: 11/13/2014
• Est. Priority Date: 05/09/2013
• Status: Abandoned Application

• Current Assignee: Vodafone IP Licensing Limited (Vodafone Group PLC)
• Original Assignee: Vodafone IP Licensing Limited (Vodafone Group PLC)
• Inventors: Babbage, Steven, Barry, Aguibou
• Application Number:
  US14/265,471
• Publication Number:
  US 20140335825A1
• Time in Patent Office: Days
• US Class Current: 455/411
• CPC Class Codes: H04L 63/083 using passwords cryptographic mechanisms or cryptographic arrangements for entity authentication using a predetermined code H04L9/3226
• CPC Class Codes: H04L 63/0853 using an additional device, e.g. smartcard, SIM or a different communication terminal cryptographic mechanisms or cryptographic arrangements for entity authentication involving additional secure or trusted devices H04L9/3234
• CPC Class Codes: H04L 63/0884 by delegation of authentication, e.g. a proxy authenticates an entity to be authenticated on behalf of this entity vis-à-vis an authentication entity
• CPC Class Codes: H04L 63/168 above the transport layer
• CPC Class Codes: H04W 12/04 Key management, e.g. using generic bootstrapping architecture [GBA]
• CPC Class Codes: H04W 12/068 using credential vaults, e.g. password manager applications or one time password [OTP] applications
• CPC Class Codes: H04W 12/08 Access security
• CPC Class Codes: H04W 88/02 Terminal devices

Abstract

A method for controlling use of an application APPI on a mobile device, the method including determining whether a user security code is active and only allowing execution of the application if the user security code is active. The user security code may be a SIM PIN or a mobile device PIN. The user security code is non-application specific and may be required for some other purpose not related to the application, such as to allow the mobile device to authenticate with the cellular telecommunications network. In this way, the user security code entered for a different purpose may be conveniently used to automatically allow execution of an application.

Claims

1. A method for controlling use of an application on a mobile device, the method including determining whether a user security code is active and allowing execution of the application in dependence upon whether the user security code is determined to be active.

2. The method of claim 1, wherein the user security code comprises a Personal Identification Number, PIN.

3. The method of claim 1, wherein the user security code relates to a Subscriber Identity Module, SIM, associated with the mobile device.

4. The method of claim 3, including establishing a secure channel between the mobile device and the SIM.

5. The method of claim 3, wherein the user security code is a SIM PIN which enables the SIM to authenticate with a cellular telecommunications network.

6. The method of claim 3, wherein the user security code is a JavaCard PIN.

7. The method of claim 3, wherein the PIN is a local PIN, global PIN or PIN 2.

8. The method of claim 3, wherein the user security code relates to a particular SIM, the method including only allowing execution of the application when the particular SIM is associated with the mobile device.

9. The method of claim 1, wherein the determining step includes checking whether the user security code is required to be entered to enable a particular function and checking whether an area protected by the user security code can be accessed.

10. The method of claim 9, wherein the area comprises a file or application.

11. The method of claim 1, wherein the user security code relates to the mobile device.

12. The method of claim 11, wherein the user security code is required to unlock a feature of the mobile device.

13. The method of claim 12, wherein the feature is a display of the mobile device.

14. The method of claim 12, wherein the feature comprises a keyboard of the mobile device.

15. The method of claim 1, including determining when the user security code was entered and selectively requesting re-entry of the user security code.

16. The method claim 1, wherein the user security code relates to the mobile device, and wherein, if the user security code is determined to be inactive, the method further includes determining whether a further user security code is active, which further user security code relates to a Subscriber Identity Module, SIM, associated with the mobile device, and then allowing execution of the application in dependence upon whether the further user security code is determined to be active.

31. The apparatus of claim 16, wherein the security means is operable to determine when the user security code was entered and to selectively request re-entry of the user security code.

17. Apparatus for controlling use of an application on a mobile device, the apparatus including security means operable to determine whether a user security code is active and to allow execution of the application in dependence upon whether the user security code is active.

18. The apparatus of claim 17, wherein the user security code comprises a Personal Identification Number, PIN.

19. The apparatus of claim 17, wherein the user security code relates to a Subscriber Identity Module, SIM, associated with the mobile device.

20. The apparatus of claim 19, including means operable to establish a secure channel between the mobile device and the SIM.

21. The apparatus of claim 19, wherein the user security code is a SIM PIN which enables the SIM to authenticate with a cellular telecommunications network.

22. The apparatus of claim 19, wherein the user security code is a JavaCard PIN.

23. The apparatus of claim 19, wherein the PIN is a local PIN, global PIN or PIN 2.

24. The apparatus of claim 19, wherein the user security code relates to a particular SIM, and including means operable to only allow execution of the application when the particular SIM is associated with a mobile device.

25. The apparatus of claim 17, wherein the security means is operable to check whether the user security code is required to be entered to enable a particular function and to check whether an area protected by the user security code can be accessed.

26. The apparatus of claim 25, wherein the area comprises a file or application.

27. The apparatus of claim 17, wherein the user security code relates to the mobile device.

28. The apparatus of claim 27, wherein the user security code is required to unlock a feature of the mobile device.

29. The apparatus of claim 28, wherein the feature is a display of the mobile device.

30. The apparatus of claim 28, wherein the feature comprises a keyboard of the mobile device.

32. The apparatus of claim 17, wherein the user security code relates to the mobile device, and wherein, if the user security code is determined to be inactive, the security means is further operable to determine whether a further user security code is active, which further user security code relates to a Subscriber Identity Module, SIM, associated with the mobile device, and to allow execution of the application in dependence upon whether the further user security code is determined to be active.