System and method for providing secured access to mobile devices

• US 7,561,691 B2
• Filed: 11/12/2001
• Issued: 07/14/2009
• Est. Priority Date: 11/12/2001
• Status: Expired due to Fees

• Current Assignee: Qualcomm, Inc.
• Original Assignee: Palm, Inc. (TCL Technology Group Corp.)
• Inventors: Blight, David C., Wong, Yoon Kean
• Primary Examiner(s): Hoffman; Brandon S
• Application Number:
  US10/012,661
• Publication Number:
  US 20030093693A1
• Time in Patent Office: 2,801 Days
• Field of Search: 380/247
• US Class Current: 380/247
• CPC Class Codes: H04L 63/0492 by using a location-limited connection, e.g. near-field communication or limited proximity of entities
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 63/0853 using an additional device, e.g. smartcard, SIM or a different communication terminal cryptographic mechanisms or cryptographic arrangements for entity authentication involving additional secure or trusted devices H04L9/3234
• CPC Class Codes: H04W 12/06 Authentication
• CPC Class Codes: H04W 12/08 Access security
• CPC Class Codes: H04W 12/126 Anti-theft arrangements, e.g. protection against subscriber identity module [SIM] cloning
• CPC Class Codes: H04W 12/30 Security of mobile devices; Security of mobile applications
• CPC Class Codes: H04W 12/64 using geofenced areas

Abstract

A system and method for providing secured access of a mobile device is disclosed herein. Access to data included in the mobile device is permitted when the presence of an authentication device having the proper authentication information is received by the mobile device.

Claims

1. A method of providing access to personal information and services on a handheld device, comprising:

interrogating an authentication device from the handheld device when the authentication device is proximal to the handheld device;

communicating an authentication data from the authentication device to the handheld device over a short range wireless communication link, the authentication data being configured to include an electronic authentication certificate for authenticating access to the information accessible by the handheld device;

verifying the authentication data at the handheld device, wherein the step of verifying includes validating the electronic authentication certificate; and

providing access to the personal information accessible by and included in the handheld device and at least one of the services when the communicated authentication data is recognized by the handheld device.

2. The method of claim 1, wherein the handheld device is a device selected from a group including a mobile telephone, a pager, a personal digital assistant, and a portable computer.

3. The method of claim 1, wherein the wireless communication link is at least one of an infrared (IR) link, a radio frequency (RF) link, and a ultrasonic link.

4. The method of claim 1, wherein interrogating an authentication device includes transmitting a proximity query by the handheld device to the authentication device.

5. The method of claim 1, wherein communicating an authentication data includes the handheld device and the authentication device being within a distance of less than 10 feet from each other.

6. The method of claim 1, further comprising requesting access to the personal information or to at least one of the services at the handheld device to initiate interrogation of the authentication device.

7. The method of claim 1, wherein interrogating an authentication device includes transmitting another authentication data from the handheld device to the authentication device.

8. An apparatus for providing authorized access to personal and/or financial data contained within a mobile device, comprising:

a short range wireless transceiver; and

a processor in communication with the transceiver, wherein access to the personal and/or financial data contained within the mobile device is provided based on authorization data transmitted by the apparatus, wherein the transceiver receives an authorization request from the mobile device over a short range wireless communication link, the authorization request comprising a request for an authorization certificate, wherein the authorization certificate uniquely identifies the apparatus for providing authorized access to the personal and/or financial data contained within the mobile device, the processor providing the authorization data to the transceiver for transmission to the mobile device.

9. The apparatus of claim 8, wherein the apparatus is within a distance of approximately 10 feet or less from the mobile device to receive the authorization request from the mobile device.

10. The apparatus of claim 9, wherein the distance is less than 6 feet.

11. The apparatus of claim 8, wherein at least one of the authorization request and the authorization data comprises a digital signature.

12. The apparatus of claim 8, wherein the processor is selected from a group including an application specific integrated circuit (ASIC), a microprocessor, and an optical processor.

13. The apparatus of claim 8, wherein the transceiver is at least one of an infra-red (IR) transceiver, a radio frequency (RF) transceiver, and an ultrasonic transceiver.

14. The apparatus of claim 8, wherein the authorization request is transmitted from the mobile device when a user requests access to the personal and/or financial data.

15. The apparatus of claim 8, wherein the authorization request is transmitted from the mobile device when the mobile device is in an active mode.

16. A system for providing selective access to sensitive data and a service, comprising:

a first device configured to include the sensitive data and to provide the service; and

a second device proximate to the first device, the first device configured to communicate a first signal and the second device configured to communicate a second signal, the first and second signals being configured to include an authentication data, wherein the authentication data uniquely identifies each of the first and second devices, wherein the first signal received and recognized by the second device and the second signal received and recognized by the first device provide a user access to the sensitive data included in the first device and the service provided by the first device,

wherein the first device is a mobile device.

17. The system of claim 16, wherein the first device is at least one of a cellular telephone, a pager, a personal digital assistant, and a portable computer.

18. The system of claim 16, wherein the second device includes at least one of a processor, a receiver, a transmitter, a transceiver, a portable power source, and an antenna.

19. The system of claim 16, wherein the first and second devices communicate the first and second signals by at least one of an infra-red (IR) link, a radio frequency (RF) link, and a ultrasonic link.

20. The system of claim 16, wherein the first and second devices are within a distance of approximately 10 feet or less from each other.

21. The system of claim 16, wherein at least one of the first and second signals is a signal selected from at least one of a Bluetooth signal, an IEEE 802.11 signal, a time division multiple access (TDMA) signal, a code division multiple access (CDMA) signal, a global system for mobile communications (GSM) signal, and a general packet radio system (GPRS) signal.

22. A process for preventing unauthorized access of a first device, comprising:

detecting the presence of a second device in the near vicinity of or located proximal to the first device;

verifying a signal communicated from the second device over a short range wireless communication link, the signal including authorization data, wherein the authorization data uniquely identifies the second device, the authorization data being configured to provide access to the first device; and

providing access of secured data included in the first device when the signal is acceptable at the first device, wherein the first device is a handheld computer.

23. The process of claim 22, wherein detecting the presence includes communicating another signal to the second device from the first device when access of the secured data at the first device is requested.

24. The process of claim 23, wherein access of the secured data at the first device is requested in at least one of when the first device is in an active mode, by a user of the first device, and at set time periods.

25. A method of providing access to secured services or secured data on a handheld device, comprising:

transmitting a proximity query by the handheld device to an authentication device using a short range wireless transceiver;

communicating an authentication data from the authentication device to the handheld device over a short range wireless communication link, the authentication data being configured to include an electronic authentication certificate for authenticating access to the secured services or secured data on the handheld device;

verifying the authentication data at the handheld device, wherein the step of verifying includes validating the electronic authentication certificate; and

providing access to secured services or secured data on the handheld device when the communicated authentication data is recognized by the handheld device and when the handheld device is within a pre-determined proximity range.