Virtual SIM card for mobile handsets

• US 8,200,736 B2
• Filed: 12/24/2007
• Issued: 06/12/2012
• Est. Priority Date: 12/24/2007
• Status: Active Grant

• Current Assignee: Qualcomm, Inc.
• Original Assignee: Qualcomm, Inc.
• Inventors: Shi, Guangming, Tangirala, Venkat, Durand, Julian, Dudani, Ajay
• Primary Examiner(s): EL CHANTI, HUSSEIN A
• Application Number:
  US11/963,918
• Publication Number:
  US 20090163175A1
• Time in Patent Office: 1,632 Days
• Field of Search: 709217-219, 709/200, 709/229
• US Class Current: 709/200
• CPC Class Codes: H04L 63/0853 using an additional device, e.g. smartcard, SIM or a different communication terminal cryptographic mechanisms or cryptographic arrangements for entity authentication involving additional secure or trusted devices H04L9/3234
• CPC Class Codes: H04L 63/0861 using biometrical features, e.g. fingerprint, retina-scan cryptographic mechanisms or cryptographic arrangements for entity authentication using biological data H04L9/3231
• CPC Class Codes: H04W 12/062 Pre-authentication
• CPC Class Codes: H04W 12/068 using credential vaults, e.g. password manager applications or one time password [OTP] applications
• CPC Class Codes: H04W 12/069 using certificates or pre-shared keys
• CPC Class Codes: H04W 12/42 using virtual identity modules
• CPC Class Codes: H04W 8/205 Transfer to or from user equipment or user record carrier

Abstract

A system and method for providing a capability to backup cellular telephone provisioning information and personal data from a mobile handset on a server. A user initializes an account with a service provider with authentication credentials and backs up provisioning information and personal data stored within a mobile handset to server for safe keeping. The provisioning information and personal data can be accessed via the cellular telephone network so that the provisioning and personal data can be transferred among mobile handsets. This allows a user to restore personal data quickly and easily if a mobile handset replaced, lost or destroyed. The system and method further provide the capability to remotely provision new mobile handsets.

Claims

1. A method for provisioning a mobile handset, comprising:

storing provisioning information for the mobile handset in a central database;

receiving via a cellular telephone network an account name and an authentication credential from a user of the mobile handset; and

downloading the mobile handset provisioning information to the mobile handset using the cellular telephone network,

wherein the handset provisioning information is automatically downloaded to the mobile handset every time the mobile handset is powered up.

2. The method of claim 1, further comprising authenticating the user based on the received account name and authentication credential prior to downloading the handset provisioning information to the mobile handset.

3. The method of claim 1, wherein the authentication credential comprises an alphanumeric password.

4. The method of claim 1, wherein the authentication credential comprises biometric information.

5. The method of claim 4, further wherein the authentication credential also comprises an alphanumeric password.

6. The method of claim 1, wherein the authentication credential comprises finger print information generated by a finger print scanner.

7. The method of claim 1, wherein the authentication credential comprises a retinal scan generated by a camera capable of scanning the user'"'"'s retina.

8. The method of claim 1, wherein the authentication credential comprises an image of the user'"'"'s facial features generated by a camera capable of performing facial recognition.

9. The method of claim 1, wherein the authentication credential comprises a handwriting sample generated by a digital pen and pad.

10. The method of claim 1, wherein the authentication credential comprises a three dimensional scan of a shape and depth of the user'"'"'s ear canal generated by a three dimensional scanning sensor.

11. The method of claim 1, wherein the authentication credential comprises a spoken phrase suitable for a voice print comparison.

12. The method of claim 1, further comprising:

storing the user'"'"'s personal data for the mobile handset in the central database; and

downloading the user'"'"'s personal data to the mobile handset using the cellular telephone network.

13. The method of claim 1, wherein the central database is a VSIM database coupled to a server, and the server is configured to receive and transmit data via the cellular telephone network.

14. The method of claim 2, wherein authenticating the user is accomplished by an authentication server.

15. The method of claim 1, further comprising accessing at least one operator provisioning center which contains provisioning information.

16. The method of claim 1, wherein the central database contains provisioning information for a plurality of cellular telephone service providers.

17. The method of claim 1, further comprising requesting the user to select one service provider from a selection of multiple service providers.

18. The method of claim 17, wherein downloading the mobile handset provisioning information downloads provisioning information from the selected service provider to the mobile handset.

19. A method for restoring personal data for use in a user'"'"'s mobile handset, comprising:

requesting the user to enter an authentication credential into the mobile handset every time the mobile handset is powered up;

receiving the entered authentication credentials at an authentication server via a cellular telephone network;

authenticating the user if the entered authentication credential matches an authentication credential previously stored in an authentication database;

granting access to personal data previously stored in a VSIM database if the user is authenticated; and

transmitting personal data to the user'"'"'s mobile handset for storage in an internal memory of the mobile handset,

wherein the user'"'"'s personal data is automatically transmitted every time the mobile handset is powered up.

20. The method of claim 19, further comprising storing mobile handset provisioning information in a server accessible by a mobile handset;

and

downloading the handset provisioning information to the mobile handset using the cellular telephone network.

21. The method of claim 20, wherein the user is authenticated prior to downloading provisioning information and personal data.

22. The method of claim 19, wherein requesting the user to enter an authentication credential comprises requesting the user to perform an act that generates biometric data.

23. The method of claim 19, wherein requesting the user to enter an authentication credential comprises requesting the user to key in an alphanumeric password.

24. The method of claim 22, further wherein requesting the user to enter an authentication credential further comprises requesting the user to key in an alphanumeric password.

25. The method of claim 22, wherein said act requires the user to swipe a finger over a fingerprint sensor.

26. The method of claim 22, further wherein said act requires the user to record a voice recognition sample.

27. The method of claim 22, further wherein said act requires the user to provide a retinal scan.

28. The method of claim 22, further wherein said act requires the user to provide a facial image.

29. The method of claim 22, further wherein said act requires the user to provide a handwriting sample.

30. The method of claim 22, further wherein said act is a scan of the user'"'"'s ear canal.

31. A method for preserving personal data for use in a user'"'"'s mobile handset, comprising:

requesting the user to enter an authentication credential into the mobile handset every time the mobile handset is powered up;

receiving the entered authentication credential at an authentication server via a cellular telephone network;

authenticating the user if the entered authentication credential matches an authentication credential previously stored in an authentication database;

granting the user access to modify personal data stored in a VSIM database if the user is authenticated;

receiving personal data from the user'"'"'s mobile handset via the cellular telephone network; and

storing the received personal data to a VSIM database,

wherein the user'"'"'s personal data is automatically preserved every time the mobile handset is powered up.

32. The method of claim 31, wherein authenticating the user is performed by an authentication server.

33. The method of claim 31, wherein requesting the user to enter an authentication credential comprises requesting the user to perform an act that generates biometric data.

34. The method of claim 31, wherein requesting the user to enter an authentication credential comprises requesting the user to key in an alphanumeric password.

35. The method of claim 31, wherein requesting the user to enter an authentication credential further comprises requesting the user to key in an alphanumeric password.

36. The method of claim 33, wherein said act requires the user to swipe a finger over a fingerprint sensor.

37. The method of claim 33, further wherein said act requires a user to record a voice recognition sample.

38. The method of claim 33, further wherein said act requires a user to provide a retinal scan.

39. The method of claim 33, further wherein said act requires the user to provide a facial image.

40. The method of claim 33, further wherein said act requires the user to provide a handwriting sample.

41. The method of claim 33, further wherein said act requires the user to provide a scan of the user'"'"'s ear canal.

42. The method of claim 31, wherein the user'"'"'s personal data is automatically stored in the VSIM database each time the user modifies the personal data stored in the internal memory of the mobile handset.

43. The method of claim 31, wherein the user'"'"'s personal data is automatically preserved at a preset interval.

44. A non-transitory computer readable medium having stored thereon computer executable instructions for restoring personal data to a user'"'"'s mobile handset, the computer executable instructions configured to cause a server to perform steps comprising:

requesting the user to enter an authentication credential into the mobile handset upon power up of the handset;

receiving the entered authentication credential via a cellular telephone network and providing the entered authentication credential at an authentication server;

granting access to personal data previously stored in a VSIM database if the user is authenticated by the authentication server; and

automatically transmitting via the cellular telephone network personal data to the user'"'"'s mobile handset for storage in an internal memory of the mobile handset every time the mobile handset is powered up.

45. The non-transitory computer readable medium of claim 44, wherein the computer executable instructions further comprise instructions to cause the server to:

store mobile handset provisioning information; and

download the handset provisioning information to the mobile handset using the cellular telephone network every time the mobile handset is powered up.

46. The non-transitory computer readable medium of claim 44, wherein the computer executable instructions further comprise instructions to cause the server to request the user to perform an act that generates biometric data.

47. The non-transitory computer readable medium of claim 44, wherein the computer executable instructions further comprise instructions to cause the server to request the user to key in an alphanumeric password.

48. The non-transitory computer readable medium of claim 46, wherein the computer executable instructions further comprise instructions to further cause the server to request the user to key in an alphanumeric password.

49. The non-transitory computer readable medium of claim 44, wherein the computer executable instructions further comprise instructions to cause the server to request the user to swipe a finger over a fingerprint sensor.

50. The non-transitory computer readable medium of claim 44, wherein the computer executable instructions further comprise instructions to cause the server to request the user to record a voice recognition sample.

51. The non-transitory computer readable medium of claim 44, wherein the computer executable instructions further comprise instructions to cause the server to request the user to provide a retinal scan.

52. The non-transitory computer readable medium of claim 44, wherein the computer executable instructions further comprise instructions to cause the server to request the user to provide a facial recognition image.

53. The non-transitory computer readable medium of claim 44, wherein the computer executable instructions further comprise instructions to cause the server to request the user to provide a handwriting sample.

54. The non-transitory computer readable medium of claim 44, wherein the computer executable instructions further comprise instructions to cause the server to request the user to provide a scan of the user'"'"'s ear canal.

55. The non-transitory computer readable medium of claim 44, wherein the computer executable instructions further comprise instructions to request the user to cause the server to perform steps comprising:

receiving via the cellular telephone network personal data from the user'"'"'s mobile handset; and

storing the received personal data to a VSIM database.

56. A system for transferring and preserving personal data for use in a user'"'"'s mobile handset, comprising:

a mobile handset having an internal memory, wherein the mobile handset is configured to access the internal memory for provisioning and user personal data;

a VSIM server having a VSIM processor, wherein the VSIM server is configured to be accessible by the mobile handset via a cellular telephone network;

a VSIM database in communication with the VSIM server, wherein the VSIM database is configured to store provisioning and personal data for use on the mobile handset;

an authentication server having an authentication processor in communication with the VSIM server; and

an authentication database in communication with the authentication server, wherein the VSIM server is configured to;

receive from a user authentication information sent by the mobile handset via the cellular telephone network every time the mobile handset is powered up; and

grant the user access to personal data in the VSIM database if the user is authenticated by the authentication processor.

57. The system of claim 56, wherein the VSIM server is further configured to store mobile handset provisioning information in at least one operator provisioning server accessible by a mobile handset, and download the provisioning data to the mobile handset using the cellular telephone network every time the mobile handset is powered up.

58. The system of claim 56, wherein the VSIM server is further configured to download the provisioning data to the mobile handset using the cellular telephone network every time the mobile handset is powered up.

59. The system of claim 56 wherein:

the VSIM server is further configured to receive from the mobile handset via the cellular telephone network user personal data stored in the internal memory of the mobile handset; and

the mobile handset is configured to transmit to the VSIM server via the cellular telephone network user personal data stored in the internal memory.

60. The system of claim 56, wherein:

the VSIM server is further configured to transmit to the mobile handset via the cellular telephone network user personal data for storage in the internal memory of the mobile handset; and

the mobile handset is configured to receive user personal data from the VSIM server via the cellular telephone network and to store the received user personal data in the internal memory.

61. The system of claim 56, wherein the mobile handset further comprises a biometric sensor, and the authentication server is configured to authenticate a user based upon biometric information.

62. The system of claim 56, wherein the mobile handset further comprises a keypad, and the authentication server is configured to authenticate a user based upon an alphanumeric password.

63. The system of claim 61, wherein the mobile handset further comprises a keypad, and the authentication server is further configured to authenticate a user based upon said biometric information and an alphanumeric password.

64. The system of claim 61, further wherein said biometric sensor is a fingerprint sensor, and the authentication server is configured to authenticate a user based upon finger print information provided by the fingerprint sensor.

65. The system of claim 61, further wherein said biometric sensor is a voice recognition recorder, and the authentication server is configured to authenticate a user based upon recorded voice information provided by the voice recognition recorder.

66. The system of claim 61, further wherein said biometric sensor is a retinal scan sensor, and the authentication server is configured to authenticate a user based upon retinal scan information provided by the retinal scan sensor.

67. The system of claim 61, further wherein said biometric sensor is a camera, and the authentication server is configured to authenticate a user based upon recognition of facial features in an image provided by the camera.

68. The system of claim 61, further wherein said biometric sensor is a digital pen and pad, and the authentication server is configured to authenticate a user based upon a handwriting sample provided by the digital pen and pad.

69. The system of claim 61, further wherein said biometric sensor is a three dimensional scanner sensor, and the authentication server is configured to authenticate a user based the depth and shape of the user'"'"'s ear canal provided by the three dimensional scanner sensor.

70. The system of claim 56, wherein the at least one operator provisioning center server contains provisioning information for a plurality of service providers.

71. The system of claim 70, wherein the VSIM server contains provisioning information for a plurality of service providers.

72. The system of claim 70, further comprising a plurality of operator provisioning centers in communication with the VSIM server.

73. The system of claim 72, wherein each of said plurality of operator provisioning centers contains provisioning information for a different service provider.

74. A non-transitory computer readable medium having stored therein software instructions executable on a cellular telephone processor and configured to cause the processor to perform steps comprising:

transmitting an authentication credential to an external server via a cellular telephone network every time the mobile handset is powered up;

automatically receiving provisioning information via the cellular telephone network upon successful authentication;

storing the received provisioning information in an internal memory unit; and

using the provisioning data stored in the memory unit for placing and receiving calls from the cellular telephone network.

75. The non-transitory computer readable medium of claim 74, wherein the stored software instructions are configured to cause the processor to further perform the steps of:

receiving biometric data from a biometric sensor; and

transferring the received biometric data to an external server via the cellular data network.

76. The non-transitory computer readable medium of claim 75, wherein the stored software instructions are configured to cause the processor to further perform the steps of:

receiving a request for user authentication data via the cellular telephone network; and

prompting a user to use the biometric sensor to generate the biometric data in response to receiving the request for user authentication data.

77. The non-transitory computer readable medium of claim 74, wherein the stored software instructions are configured to cause the processor to further perform the step of transmitting personal data stored in memory to the external server via the cellular data network.

78. The non-transitory computer readable medium of claim 74, wherein the stored software instructions are configured to cause the processor to further perform the step of transmitting personal data stored in memory to the external server via the cellular data network when the personal data is modified by a user.

79. The non-transitory computer readable medium of claim 74, wherein the stored software instructions are configured to cause the processor to further perform the step of transmitting personal data stored in memory to the external server via the cellular data network at predetermined intervals.

80. The non-transitory computer readable medium of claim 74, wherein the stored software instructions are configured to cause the processor to further perform the step of transmitting personal data stored in memory to the external server via the cellular data network when prompted to do so by a user.

81. The non-transitory computer readable medium of claim 74, wherein the received personal data comprises a phonebook and the stored software instructions are configured to cause the processor to further perform the step of providing phonebook functionality using the personal data stored in memory.

82. The non-transitory computer readable medium of claim 74, wherein the received personal data comprises a ring tone and the stored software instructions are configured to cause the processor to further perform the step of using the ring tone in the personal data stored in memory.

83. The non-transitory computer readable medium of claim 74, wherein the received personal data comprises a wall paper and the stored software instructions are configured to cause the processor to further perform the step of using the wall paper in the personal data stored in memory.