Checking the identification number of a mobile subscriber

• US 5,907,804 A
• Filed: 11/21/1996
• Issued: 05/25/1999
• Est. Priority Date: 11/24/1995
• Status: Expired due to Term

• Current Assignee: Cassidian Finland OY
• Original Assignee: Nokia Telecommunications Oy (Nokia Corporation)
• Inventors: Hakala, Pasi, Schroderus, Osmo
• Primary Examiner(s): WOLFE JR, WILLIS RAY
• Application Number:
  US08/754,553
• Time in Patent Office: 915 Days
• Field of Search: 455/410, 455/411, 455/550, 455/551, 340/825.34
• US Class Current: 455/411
• CPC Class Codes: G07F 7/1008 Active credit-cards provided with means to personalise their use, e.g. with PIN-introduction/comparison system
• CPC Class Codes: G07F 7/1025 Identification of user by a PIN code
• CPC Class Codes: H04L 63/0853 using an additional device, e.g. smartcard, SIM or a different communication terminal cryptographic mechanisms or cryptographic arrangements for entity authentication involving additional secure or trusted devices H04L9/3234
• CPC Class Codes: H04L 63/101 Access control lists [ACL]
• CPC Class Codes: H04W 12/06 Authentication
• CPC Class Codes: H04W 12/082 using revocation of authorisation
• CPC Class Codes: H04W 12/72 Subscriber identity
• CPC Class Codes: H04W 88/02 Terminal devices

Abstract

The invention relates to method for checking a personal identification number (PIN) of a subscriber in a mobile equipment (500) employed in a mobile communications system (600), the mobile equipment containing a protected subscriber identity (IMSI, ITSI). The method comprises the steps of requesting (203) the user of the mobile equipment the personal identification number (PIN) of the subscriber, checking (103) the validity of the personal identification number entered by the user, repeating (109) these steps provided that the user does not enter the valid personal identification number, and, when the number of requests (203) and checks (103) of the identification number exceeds a predetermined threshold value, blocking (111) the mobile equipment. According to the invention, protection of a protected subscriber identity is released (112), thus finding out the identity of the subscriber; the subscriber identity as well as and an indication that the mobile equipment has been blocked are transmitted the mobile communications system.

Claims

1. A mobile equipment, said mobile equipment being a combination of a subscriber station and an individual subscriber identity module containing a protected subscriber identity, said individual subscriber identity module being removably attached to the subscriber station, whereby a mobile equipment may be composed by attaching the subscriber identity module to any subscriber station, the mobile equipment comprising:

a user interface for requesting a personal identification number of a subscriber from the user of the mobile equipment,

checking means for checking the validity of said personal identification number of the subscriber,

a counter for counting the number of validity checks of the personal identification number of the subscriber,

blocking means responsive to said counter for blocking the subscriber identity module when the number of said validity checks exceeds a predetermined number without the user of the mobile equipment having entered a valid personal identification number,

releasing means responsive to said blocking means for releasing the protection of the protected subscriber identity in the subscriber identity module after the blocking of the subscriber identity module,

means for requesting the released subscriber identity from the subscriber identity module,

means for sending the released subscriber identity from the subscriber identity module to the subscriber station, and

transmission means for transmitting to the mobile communications system the released subscriber identity and an indication that the subscriber identity module has been blocked.

2. A mobile equipment as claimed in claim 1, wherein said transmission means being arranged to transmit said subscriber identity and said indication that subscriber identity module has been blocked to the mobile communications system in a registration message.

3. A method for checking a personal identification number of a subscriber in a mobile equipment employed in a mobile communications system, said mobile equipment being a combination of a subscriber station and an individual subscriber identity module containing a protected subscriber identity, said individual subscriber identity module being removably attached to the subscriber station, whereby a mobile equipment may be composed by attaching the subscriber identity module to any subscriber station, the method comprising the steps of:

requesting the user of the mobile equipment the personal identification number of the subscriber,

checking from the subscriber identity module the validity of the personal identification number entered by the user,

repeating these stops provided that the user does not enter the valid personal identification number,

blocking the subscriber identity module when the number of requests and checks of the personal identification number exceeds a predetermined threshold value,

releasing a protection of the protected subscriber identity in the subscriber identity module after said blocking of the subscriber identity module,

requesting by the subscriber station the released subscriber identity from the subscriber identity module, p1 sending by the subscriber identity module to the subscriber station the released subscriber identity,

transmitting to the mobile communications system said subscriber identity and an indication that the subscriber identity module has been blocked.

4. A method as claimed in claim 3, wherein said step at transmitting is performed by

transmitting said subscriber identity and said indication that the subscriber identity module has been blocked to the mobile communication system in a registration message.

5. A method as claimed in claim 3, comprising the step of

labelling said subscriber identity as forbidden in a database of the mobile communications system in response to said subscriber identity and said indication that subscriber identity module has been blocked, transmitted to the mobile communications system.

6. A method as claimed in claim 5, comprising the step of

said subscriber identity being no longer valid for employing the services of the mobile communications system in response to said labelling of said subscriber identity as forbidden in the database of the mobile communication system.

7. A method as claimed in claim 5, comprising the step of

said subscriber identity being no longer valid for employing the services of the mobile communications system, and the mobile communications system yet maintaining information on the location of said mobile equipment and/or subscriber identity module, in response to labelling said subscriber identity as forbidden in the database of the mobile communications system.

8. A method as claimed in claim 5, comprising the step of

reporting said subscriber identity and the attempt of misusing said personal identification number of the subscriber to the operator of the mobile communication system in response to said labelling of said subscriber identity as forbidden in the database of the mobile communications system.

9. A method as claimed in claim 5, comprising the step of

reporting said subscriber identity, subscriber data related to said subscriber and the attempt of misusing said subscriber identification number to the operator of the mobile communications system in response to labelling said subscriber identity as forbidden in the database of the mobile communications system.

10. A method as claimed in claim 5, comprising the step of

reporting the attempt of misusing the subscriber identity module and/or the personal identification number of the subscriber to the legitimate owner of the subscriber identity module and/or the personal identification number of the subscriber in response to said labelling of said subscriber identity as forbidden in the database of the mobile communications system.