Method and arrangement for controlling access to data in mobile communications networks

• US 7,689,662 B2
• Filed: 06/05/2002
• Issued: 03/30/2010
• Est. Priority Date: 06/06/2001
• Status: Active Grant

• Current Assignee: Siemens AG
• Original Assignee: Siemens AG
• Inventors: Boehmer, Bernhard, Leitgeb, Manfred
• Primary Examiner(s): Vaughn, Jr.; William C
• Assistant Examiner(s): Serrao; Ranodhi N
• Application Number:
  US10/162,224
• Publication Number:
  US 20020199011A1
• Time in Patent Office: 2,855 Days
• Field of Search: 709/225, 709229-232, 709223-224, 709217-219, 707/9, 455432-439, 711/100
• US Class Current: 709/217
• CPC Class Codes: H04L 63/102 Entity profiles
• CPC Class Codes: H04W 12/08 Access security
• CPC Class Codes: H04W 8/18 Processing of user or subscriber data, e.g. subscribed services, user preferences or user profiles; Transfer of user or subscriber data

Abstract

A method and an arrangement of access to data by users in mobile communications networks which can be controlled. Data which is stored in one or more data memories in the mobile communications network for a user of the mobile communications network is addressed by a data processing device, after which a central control device in the mobile communications network uses predetermined checking criteria to check whether the data processing device is authorized to access such data, and the central control device allows access if the check result is positive.

Claims

1. A method for controlling access to data in mobile communications networks, comprising:

identifying particular data to be read from or written to a data memory by a data processing device in order for a particular service to be provided to a user of a mobile communication device;

sending at least one of a read addressing message or a write addressing message from the data processing device to the data memory, the read addressing message or write addressing message identifying (a) the particular data to be read from or written to the data memory and (b) the user to be provided the particular service requiring the particular data to be read from or written to the data memory;

in response to receiving the read addressing message or write addressing message at the data at the data memory, sending a checking request from the data memory to a central control device;

checking by the central control device, using predetermined checking criteria, whether the data processing device is authorized to access the data memory to read or write the particular data identified in the read addressing message or write addressing message; and

the central control device allowing the data processing device access to the data memory to read or write the particular data if the check result is positive and not if negative.

2. The method as claimed in claim 1, wherein if the check result is positive, the central control device allows access by sending a positive check response message to the data memory, and the data memory transmits the particular data to the data processing device.

3. The method as claimed in claim 1, wherein if the check result is positive, the central control device allows access by sending a positive check response message to the data memory, and the data memory then writes the particular data.

4. An arrangement for controlling access to data in mobile communications networks, comprising:

one or more data memories to store data for users of the mobile communications networks;

one or more data processing devices having access to the data, wherein a particular data processing device is designed to send at least one of a read addressing message or a write addressing message to a respective data memory, the read addressing message or write addressing message identifying (a) particular data to be read from or written to the data memory in order for a particular service to be provided to a user of a mobile communication device and (b) the user to be provided the particular service requiring the particular data to be read from or written to the data memory; and

a central control device, which is connected by the data memory to the data processing device, to check whether the data processing device is authorized to access the particular data when data access occurs, wherein the central control device is designed to;

receive a checking request from the data memory;

check, using predetermined checking criteria, whether the data processing device is authorized to access the data memory to read or write the particular data identified in the read addressing message or write addressing message; and

allow the data processing device access to the data memory to read or write the particular data if the check result is positive and not if negative.