Mobile communications device with security features

• US 7,720,461 B2
• Filed: 02/26/2004
• Issued: 05/18/2010
• Est. Priority Date: 02/26/2004
• Status: Active Grant

• Current Assignee: Malikie Innovations Limited (Key Patent Innovations Limited)
• Original Assignee: Research In Motion Limited (Blackberry Limited)
• Inventors: Thornton, David, Adams, Neil, Little, Herb
• Primary Examiner(s): Pérez-Gutiérrez; Rafael
• Assistant Examiner(s): Arevalo; Joseph
• Application Number:
  US10/787,859
• Publication Number:
  US 20050191988A1
• Time in Patent Office: 2,273 Days
• Field of Search: 455/558, 455/412.2, 455/90.2, 455/456.1, 455/411, 455/521, 455/575.1, 455/115.1, 455/404.2, 340/574, 340/426.1, 340/359.18, 340/573.1, 340/506, 713/153, 370/354
• US Class Current: 455/410
• CPC Class Codes: H04W 12/082 using revocation of authorisation
• CPC Class Codes: H04W 12/12 Detection or prevention of fraud
• CPC Class Codes: H04W 88/02 Terminal devices

Abstract

A mobile communications device for communicating with a wireless network. The device includes a processor, a communications sub-system connected to the processor for exchanging signals with the wireless network and with the processor, a user input device connected to the processor for sending user input signals to the processor in response to user inputs. A security module is associated with the processor for automatically taking a security action upon detecting a predetermined security user input through the user input device. The security action can include sending a duress message and/or wiping data stored on the device.

Claims

1. A mobile electronic device, comprising:

a processor;

a user input device connected to the processor for sending signals to the processor;

a display screen connected to the processor;

a communication sub-system connected to the processor for exchanging signals with a wireless network and with the processor;

a plurality of application modules associated with the processor for implementing applications on the mobile electronic device;

a storage element connected to the processor and having data stored thereon, the data comprising at least service data required to establish communications with the wireless network and user application data associated with the application modules; and

a security module associated with the processor for displaying on the display screen a plurality of selectable items upon detecting a predetermined security input through the user input device, displaying on the display screen a window comprising a prompt for further input in response to an input selecting a predetermined one of the selectable items, and performing a security action comprising deleting or encrypting all service data and/or all user application data stored on the storage element while maintaining other data stored on the storage element subsequent to a further input in response to the prompt,

wherein the security module is configured for entry of a predetermined word and to perform the security action only if the predetermined word is correctly entered subsequent to displaying the prompt for a further input, and

wherein the security module is configured to display as part of the prompt the predetermined word prior to entry of the predetermined word.

2. The mobile electronic device of claim 1, comprising a rigid case configured to be hand held and housing the processor, the user input device, the display screen and the storage element, the user input device comprising a thumbwheel responsive to user manipulation for controlling movement of an on-screen selection indicator among the plurality of selectable items and selecting the predetermined one of the selectable items.

3. The mobile electronic device of claim 1, wherein the user input device comprises a plurality of input keys, and the security module is configured to display the plurality of selectable items upon user depression of a predetermined two or more key combination.

4. The mobile electronic device of claim 1 wherein the user input device comprises a dedicated input key, and the security module is configured to display the plurality of selectable items item upon user depression of the dedicated input key.

5. The mobile electronic device of claim 1, wherein the security action comprises encrypting the service data and/or user application data stored in the storage element, and wherein the security module is configured to delete or encrypt an encryption key stored in the storage element after encrypting the service data and/or user application data stored in the storage element.

6. The mobile electronic device of claim 1, wherein the security action comprises erasing all service data while maintaining all user application data stored on the storage element.

7. The mobile electronic device of claim 1, wherein the security action comprises erasing all service data and user application data stored on the storage element while maintaining other data stored on the storage element.

8. The mobile electronic device of claim 1, wherein the service data comprises data required to establish communications with a wireless gateway connected to the wireless network.

9. The mobile electronic device of claim 1, wherein the security module is configured to perform the security action only if the predetermined word is entered within a specified time period subsequent to receiving the prompt for a further input.

10. A method of providing security for data stored on a wireless communications device, the wireless communications device comprising a processor and a storage element connected to the processor and having data stored thereon, the data comprising at least service data required to establish communications with a wireless network and user application data associated with the application modules or implementing applications on the wireless communications device, the method comprising the steps of:

displaying a list of selectable items on a display screen of the wireless communications device upon detecting a predetermined security input through an user input device;

providing the wireless communications device with an input device enabling movement of a selection indicator among the items of the displayed list;

in response to a selection of a predetermined one of the selectable items, displaying on the display screen a window comprising a prompt for a further input; and

subsequent to a further input in response to the prompt, performing a security action comprising deleting or encrypting all service data and/or all user application data stored on the storage element while maintaining other data stored on the storage element,

subsequent to receiving the further input, displaying on the display screen a further window comprising a prompt for yet a further input, wherein the security action is performed only if the yet further input is received through the input device subsequent to receiving the prompt for yet a further input, and

wherein the further window comprises a word and instructions to enter the word as the yet further input to proceed with the security action.

11. The method of claim 10, wherein the window comprises displayed selectable options of continuing with the security action or cancelling the security action.

12. The method of claim 10, wherein the input device is provided as a thumbwheel responsive to manipulation for controlling movement of the selection indicator among the plurality of selectable items for selecting the predetermined one of the selectable items.

13. The method of claim 10, wherein the user input device comprises a plurality of input keys for inputting characters.

14. The method of any one claim 10, wherein the security action comprises encrypting the service data and/or user application data stored in the storage element, and wherein the security module deletes or encrypts an encryption key stored in the storage element after encrypting the service data and/or user application data stored in the storage element.

15. The method of claim 10, wherein the security action comprises erasing all service data while maintaining all user application data stored on the storage element.

16. The method of claim 10, wherein the security action comprises erasing all service data and user application data stored on the storage element while maintaining other data stored on the storage element.

17. The method of claim 10, wherein the service data comprises data required to establish communications with a wireless gateway connected to the wireless network.

18. The method of claim 10, wherein the security action is performed only if the yet further user input is received through the input device within a specified time period subsequent to receiving the prompt for yet a further user input.