System and method of authenticating login credentials in a wireless communication system

• US 8,244,217 B2
• Filed: 08/04/2011
• Issued: 08/14/2012
• Est. Priority Date: 12/16/2005
• Status: Active Grant

• Current Assignee: Malikie Innovations Limited (Key Patent Innovations Limited)
• Original Assignee: Blackberry Limited
• Inventors: Balsillie, Jim
• Primary Examiner(s): Lim, Steven
• Application Number:
  US13/198,052
• Publication Number:
  US 20110287744A1
• Time in Patent Office: 376 Days
• Field of Search: 455410-411
• US Class Current: 455/411
• CPC Class Codes: H04L 63/083 using passwords cryptographic mechanisms or cryptographic arrangements for entity authentication using a predetermined code H04L9/3226
• CPC Class Codes: H04W 12/06 Authentication
• CPC Class Codes: H04W 12/08 Access security
• CPC Class Codes: H04W 76/30 Connection release

Abstract

A technique in a wireless mobile device for use in enabling service sessions with a host service via a wireless network is described. The device receives a host login credential from the host service, and saves it in memory. The device detects a logoff trigger for logging off from an enabled service session with the host service. In response to detecting the logoff trigger, the device performing the following actions. The device prompts with, in a display, an entry screen having a field for entry of a device login credential for use in logging on to a subsequent service session with the host service. The device receives, via a user I/O subsystem, the device login credential in response to the prompting, and saves it in memory. After receiving and saving the device login credential, the device logs off from the enabled service session with the host service. After the logging off from the enabled service session, the device detects a login trigger for logging on to the subsequent service session with the host service. In response to detecting the login trigger, the device authenticates the saved device login credential with the saved host login credential.

Claims

1. A method in a wireless mobile device for use in enabling service sessions with a host service via a wireless network, the wireless mobile device including a user input/output (I/O) subsystem having at least a display, the method comprising the steps of:

receiving at least one host login credential from the host service, and saving the at least one host login credential in memory of the wireless mobile device;

detecting, at the wireless mobile device, a logoff trigger for logging off from an enabled service session with the host service;

in response to detecting the logoff trigger, the wireless mobile device performing the following acts;

prompting with, in the display, an entry screen having at least one field for entry of at least one device login credential for use in logging on to a subsequent service session with the host service;

receiving, via the user I/O subsystem, the at least one device login credential in response to the prompting, and saving the at least one device login credential in the memory;

after receiving and saving the at least one device login credential, logging off from the enabled service session with the host service;

after the logging off from the enabled service session, detecting, at the wireless mobile device, a login trigger for logging on to the subsequent service session with the host service;

in response to detecting the login trigger, authenticating, at the wireless mobile device, the at least one device login credential saved in the memory with the at least one saved host login credential saved in the memory.

2. The method of claim 1, wherein the enabled service session is utilized for a communication of data messages between the host service and the wireless mobile device via the wireless network, and the subsequent service session is utilized for a subsequent communication of data messages between the host service and the wireless mobile device via the wireless network.

3. The method of claim 1, further comprising:

after authenticating, sending via the wireless network a login notification to the host service.

4. The method of claim 1, further comprising:

after authenticating, communicating in the subsequent service session.

5. The method of claim 1, further comprising:

after authenticating, receiving via the wireless network at least one updated host login credential from the host service, and storing the at least one updated host login credential for a subsequent authentication.

6. The method of claim 1 wherein for the enabled and subsequent service sessions utilized for the communication of data messages, the host service is configured to receive the data messages for the wireless mobile device from other devices and cause them to be synchronized with and mirror those at the wireless mobile device.

7. The method of claim 1, wherein the logoff trigger is a user-initiated logoff trigger.

8. The method of claim 1 wherein the at least one device login credential includes at least one of a login, password, a shared public, a private key, a secret token and a virtual private network (VPN) token.

9. The method of claim 1 wherein the at least one login credential comprises a password.

10. The method of claim 1 wherein the wireless mobile device and the wireless network are operative in accordance with IEEE 802.11.

11. The method of claim 1 wherein the wireless mobile device comprises a cellular telephone, and the wireless mobile device and the wireless network are operative in accordance with cellular telecommunication standards.

12. A wireless mobile device, comprising:

a processor;

memory coupled to the processor;

a wireless transceiver coupled to the processor and configured for communication with a wireless communication network;

a user input/output (I/O) subsystem having at least a display;

the processor being configured to;

receive, via the wireless transceiver, at least one host login credential from the host service, and save the at least one host login credential in the memory;

detect a logoff trigger for logging off from an enabled service session with the host service;

in response to detecting the logoff trigger, perform the following actions;

prompt with, in the display, an entry screen having at least one field for entry of at least one device login credential for use in logging on to a subsequent service session with the host service;

receive, via the user I/O subsystem, the at least one device login credential in response to the prompting, and save the at least one device login credential in the memory;

after receiving and saving the at least one device login credential, log off from the enabled service session with the host service;

after the logging off from the enabled service session, detect a login trigger for logging on to the subsequent service session with the host service;

in response to detecting the login trigger, authenticate the at least one device login credential saved in the memory with the at least one saved host login credential saved in the memory.

13. The wireless mobile device of claim 12, wherein the enabled service session is utilized for a communication of data messages between the host service and the wireless mobile device via the wireless network, and the subsequent service session is utilized for a subsequent communication of data messages between the host service and the wireless mobile device via the wireless network.

14. The wireless mobile device of claim 12, wherein the processor is further configured to:

after authenticating, send via the wireless transceiver a login notification to the host service.

15. The wireless mobile device of claim 12, wherein the processor is further configured to:

after authenticating, operate the wireless transceiver for communications in the subsequent service session with the host service.

16. The wireless mobile device of claim 12, wherein the processor is further configured to:

after authenticating, receive via the wireless transceiver at least one updated host login credential from the host service, and store the at least one updated host login credential for a subsequent authentication.

17. The wireless mobile device of claim 12, wherein the processor is further configured to:

wherein for the enabled and subsequent service sessions utilized for the communication of data messages, the host service is configured to receive the data messages for the wireless mobile device from other devices and cause them to be synchronized with and mirror those at the wireless mobile device.

18. The wireless mobile device of claim 12, wherein the logoff trigger is a user-initiated logoff trigger.

19. The wireless mobile device of claim 12, wherein the at least one device login credential includes at least one of a login, password, a shared public, a private key, a secret token and a virtual private network (VPN) token.

20. The wireless mobile device of claim 12, wherein the at least one login credential comprises a password.