METHOD AND APPARATUS FOR MANAGING USER PROVIDED ACCESS TOKENS

• US 20150007348A1
• Filed: 10/31/2012
• Published: 01/01/2015
• Est. Priority Date: 11/28/2011
• Status: Active Grant

• Current Assignee: Nokia Technologies Oy (Nokia Corporation)
• Original Assignee: Nokia Corporation
• Inventors: Holtmanns, Silke, Lindholm, Rune
• Granted Patent: US 9,547,759 B2
• Time in Patent Office: Days
• US Class Current: 726/28
• CPC Class Codes: G06F 21/31 User authentication
• CPC Class Codes: G06F 21/45 Structures or tools for the administration of authentication
• CPC Class Codes: H04L 63/083 using passwords cryptographic mechanisms or cryptographic arrangements for entity authentication using a predetermined code H04L9/3226
• CPC Class Codes: H04W 12/06 Authentication
• CPC Class Codes: H04W 12/35 Protecting application or service provisioning, e.g. securing SIM application provisioning
• CPC Class Codes: H04W 12/37 Managing security policies for mobile devices or for controlling mobile applications
• CPC Class Codes: H04W 12/45 using multiple identity modules
• CPC Class Codes: H04W 4/50 Service provisioning or reconfiguring
• CPC Class Codes: H04W 4/60 Subscription-based services using application servers or record carriers, e.g. SIM application toolkits

Abstract

A method comprises receiving an additional user provided access token requesting application at a device already having a user provided access token requesting application. The method also comprises requesting information from a user of said device if an access token of one of said applications is to be changed to that of the other of said applications and accepting verification by one of said applications as verification of another of said applications.

Claims

1-24. -24. (canceled)

25. An apparatus comprising a processor and a memory including software, the memory and the software configured to, with the processor, cause the apparatus to at least:

receive an additional user provided access token requesting application at a device already having a user provided access token requesting application;

request information from a user of said device if an access token of one of said applications is to be changed to that of the other of said applications; and

use one of said access tokens for verification of at least one of said applications.

26. An apparatus as claimed in claim 25, wherein said use further comprises accept verification by one of said applications as verification of another of said applications.

27. An apparatus as claimed in claim 25, wherein the apparatus is further caused to responsive to information from said user, change the access token of said one application to that of said other application.

28. An apparatus as claimed in claim 25, wherein said additional application is associated with a different source to said already provided application.

29. An apparatus as claimed in claim 25, wherein the apparatus is further caused to assign a verification key associated with a respective access token to the application for which the user provided access token has been changed.

30. An apparatus as claimed in claim 25, wherein the apparatus is further caused to determine the presence of said additional application.

31. An apparatus as claimed in claim 25, wherein the apparatus is further caused to determine by a user provided access token management entity the presence of the already provided application.

32. An apparatus as claimed in claim 25, wherein said request further comprises request information from said user of said device if said user provided access token of said additional application is to be changed to that of the already provided application.

33. An apparatus as claimed in claim 25, wherein one or more of said applications is provided on a universal integrated circuit card, integrated circuit or an embedded integrated circuit.

34. An apparatus as claimed in claim 25, wherein receive said additional application further comprises download said additional application.

35. An apparatus as claimed in claim 25, wherein receive said additional application further comprises provide a physical element carrying said additional application.

36. An apparatus as claimed in claim 25, wherein at least one of the applications resides in a removable element.

37. An apparatus as claimed in claim 25, wherein at least one of said applications is provided on one or more of a subscriber identification module, universal subscriber identification module, an internet protocol subscriber identification module, a code division multiple access subscriber identification module and a removable user identity module.

38. An apparatus as claimed in claim 25, wherein said access token comprises a personal identification number and/or password.

39. An apparatus as claimed in claim 25, wherein said request further comprises at least one of display a message and cause an audible message.

40. A computer program product comprising:

at least one computer readable non-transitory memory medium having program code stored thereon, the program code which when executed by an apparatus cause the apparatus at least to;

receive an additional user provided access token requesting application at a device already having a user provided access token requesting application;

request information from a user of said device if an access token of one of said applications is to be changed to that of the other of said applications; and

use one of said access tokens for verification of at least one of said applications.

41. A method comprising:

receiving an additional user provided access token requesting application at a device already having a user provided access token requesting application;

requesting information from a user of said device if an access token of one of said applications is to be changed to that of the other of said applications; and

using one of said access tokens for verification of at least one of said applications.

42. A method as claimed in claim 41, wherein said using further comprises accepting verification by one of said applications as verification of another of said applications

43. A method as claimed in claim 41, further comprising responsive to information from said user, changing the access token of said one application to that of said other application.

44. A method as claimed in claim 41, wherein said additional application being associated with a different source to said already provided application.