Multiple security level mobile telecommunications device system and method

• US 7,835,721 B2
• Filed: 03/27/2002
• Issued: 11/16/2010
• Est. Priority Date: 03/27/2002
• Status: Expired due to Fees

• Current Assignee: RPX Corporation
• Original Assignee: Nokia Corporation
• Inventors: Varanki, Kari-Matti, Tuulos, Martti
• Primary Examiner(s): Appiah; Charles N
• Assistant Examiner(s): Peaches; Randy
• Application Number:
  US10/508,054
• Publication Number:
  US 20050164675A1
• Time in Patent Office: 3,156 Days
• Field of Search: 455410-411, 4554561-4566, 455/41.2, 455/418, 340/539.13, 340/539.11, 726/21
• US Class Current: 455/410
• CPC Class Codes: H04L 63/105 Multiple levels of security
• CPC Class Codes: H04L 63/107 wherein the security policies are location-dependent, e.g. entities privileges depend on current location or allowing specific operations only from locally connected terminals
• CPC Class Codes: H04W 12/08 Access security
• CPC Class Codes: H04W 12/30 Security of mobile devices; Security of mobile applications
• CPC Class Codes: H04W 12/63 Location-dependent; Proximity-dependent

Abstract

A method and apparatus for implementing at least first and second security levels in a mobile telecommunications device for use within a telecommunications network. The location of the mobile device is determined, and one of the first and second security levels is selected on the basis of that location. A security procedure is implemented within the mobile device on the basis of the selected security level.

Claims

1. A method, comprising:

receiving, in a mobile device, input indicative of a geographical range and a security level associated with the geographical range;

periodically determining a location of a mobile device and comparing said determined location with said geographical range;

automatically selecting one of a plurality of security levels in response to each comparison of the determined location with the geographical range, where the selected security level is the security level associated with the geographical range when the determined location is within the geographical range; and

implementing a security procedure within the mobile device on the basis of the selected security level,

wherein each of the plurality of security levels defines security procedures implemented when the security level is selected which require the input of security data by a user in order to access services on the device, and

wherein a first security level requires more frequent input of the same security data by the user than a second security level to prevent the mobile device entering a higher security level.

2. A method according to claim 1, wherein the location is defined as an area.

3. A method according to claim 1, wherein the geographical range is defined in relation to the location.

4. A method according to claim 3, wherein the location of the mobile device is determined by a telecommunications network.

5. A method according to claim 1, wherein the location is defined in terms of a cell defined in a telecommunications network.

6. A method according to claim 1, wherein the location is defined in terms of proximity to one or more base stations within a telecommunications network.

7. A method according to claim 1, wherein the location is determined by the mobile device.

8. A method according to claim 7, wherein determining the location of the mobile device comprises:

receiving a signal at the mobile device;

ascertaining whether the signal is indicative of the device being within a relatively safe area; and

if the device is within a relatively safe area, implementing the relatively lower of the security levels within the mobile device.

9. A method according to claim 8, wherein the signal is a relatively short-range signal compared to call or data signals transmitted and received between the mobile device and a network.

10. A method according to claim 8, wherein the signal includes unique data identifying a transmitter from which it is transmitted, thereby enabling the mobile device to ascertain whether it is in a location defined by proximity to the transmitter.

11. A method according to claim 7, wherein the location is determined by reference to one or more external location providing signals.

12. A method according to claim 11, wherein the external location providing signals are global positioning system signals, the mobile device being configured to ascertain the location of the mobile device based on the global positioning system signals.

13. A method according to claim 1, wherein the geographical range is defined in terms of a radius of operation with respect to the location.

14. A method according to claim 1, wherein the first security level is higher than the second security level.

15. A method according to claim 1, further comprising:

in response to not receiving input of the security data at a frequency required by the selected security level, selecting a higher security level than the selected security level.

16. A method according to claim 1, further comprising giving a warning that the determined location is considered unsafe.

17. An apparatus, comprising:

a receiver configured to receive input indicative of a geographical range and a security level associated with the geographical range;

a comparator configured to periodically determine a location of the apparatus and compare said determined location with said geographical range;

a selector configured to automatically select one of a plurality of security level of a mobile device in response to each comparison of the determined location with the geographical range, where the selected security level is the security level associated with the geographical range when the determined location is within the geographical range; and

an implementer configured to implement a security procedure based on the selected security level,

wherein each of the plurality of security levels define a security procedure to be implemented when the security level is selected which require the input of security data by a user in order to access services on the device, and

wherein a first security level requires more frequent input of the same security data by a user than a second security level to prevent the mobile device entering a third security level.

18. An apparatus according to claim 17, wherein the location is defined as an area.

19. An apparatus according to claim 17, wherein the location of the mobile device is determined by a telecommunications network.

20. An apparatus according to claim 17, wherein the location is defined in terms of a cell defined in a telecommunications network.

21. An apparatus according to claim 17, wherein the location is defined in terms of proximity to one or more base stations within a telecommunications network.

22. An apparatus according to claim 17, wherein the location is determined by the mobile device.

23. An apparatus according to claim 22, wherein the comparator is further configured to:

receive a signal at the apparatus;

ascertain whether the received signal is indicative of the device being within a relatively safe area; and

if the apparatus is within a relatively safe are, implementing a relatively lower of the security levels within the apparatus.

24. An apparatus according to claim 23, wherein the signal is a relatively short-range signal compared to call or data signals transmitted and received between the mobile device and the network.

25. An apparatus according to claim 23, wherein the signal includes unique data identifying a transmitter from which it is transmitted, thereby enabling the apparatus to ascertain whether it is in a location defined by proximity to the transmitter.

26. An apparatus according to claim 22, wherein the location is determined by reference to one or more external location providing signals.

27. An apparatus according to claim 22, wherein the external location providing signals are global positioning system signals, the apparatus being configured to ascertain its the location of the apparatus based on the global positioning system signals.

28. An apparatus according to claim 17, wherein the geographical range is defined in terms of a radius of operation with respect to the location.

29. An apparatus according to claim 17, wherein the first security level is higher than the second security level.

30. An apparatus according to claim 17, wherein the security data comprises at least one of:

identification data, a personal identification number, a password and biometric data.

31. An apparatus according to claim 17, wherein the selector is further configured, in response to not receiving input of the security data at a frequency required by the selected security level, to select a higher security level than the selected security level.

32. An apparatus, comprising:

receiving means for receiving input indicative of a geographical range and a security level associated with the geographical range;

determining means for determining a location of the apparatus and comparing said determined location with said geographical range;

selecting means for automatically selecting one of a plurality of security levels of a mobile device in response to each comparison of the determined location with the geographical range, where the selected security level is the security level associated with the geographical range when the determined location is within the geographical range; and

implementing means for implementing a security procedure based on the selected security level,

wherein each of the plurality of security levels defines a security procedure to be implemented when the security level is selected which require the input of security data by a user in order to access services on the device, and

wherein a first security level requires more frequent input of the same security data by a user than a second security level to prevent the mobile device entering a third security level.