Method of protecting AT commands

• US 8,346,213 B2
• Filed: 11/20/2008
• Issued: 01/01/2013
• Est. Priority Date: 11/20/2007
• Status: Active Grant

• Current Assignee: Spreadtrum Communications USA
• Original Assignee: Spreadtrum Communications USA
• Inventors: Gu, Xiangxin, Lv, Ling, Zhong, Rui, Miao, Hui
• Primary Examiner(s): SHEDRICK, CHARLES TERRELL
• Application Number:
  US12/274,497
• Publication Number:
  US 20090131033A1
• Time in Patent Office: 1,503 Days
• Field of Search: 455/418, 713/151, 709/224
• US Class Current: 455/410
• CPC Class Codes: H04L 63/083 using passwords cryptographic mechanisms or cryptographic arrangements for entity authentication using a predetermined code H04L9/3226
• CPC Class Codes: H04M 1/72409 by interfacing with external accessories hands-free H04M1/60
• CPC Class Codes: H04W 12/06 Authentication
• CPC Class Codes: H04W 12/126 Anti-theft arrangements, e.g. protection against subscriber identity module [SIM] cloning
• CPC Class Codes: H04W 92/18 between terminal devices

Abstract

A method of protecting AT commands during the interaction between the AT command module of a mobile terminal and the serial communication unit of an external device, comprising the steps of: receiving AT command from the serial communication unit to the AT command module at an initial state; putting the AT command module into an ID verification mode, wherein the AT command module receives a username and password from the serial communication unit in turn, and verifies said received username and password; and putting the AT command module into an AT command processing state, when the ID verification is successful. Therefore, it'"'"'s impossible for an illegal user to take the control of the mobile terminal through AT command.

Claims

1. A method of protecting AT commands during the interaction between an AT command module of a mobile terminal and a serial communication unit of an external device, comprising the steps of:

(1) receiving said AT commands from said serial communication unit to said AT command module;

(2) putting said AT command module into an ID verification mode, wherein said AT command module receives a username and password from said serial communication unit in turn, and verifies said received username and password, comprising the steps of;

(a) sending information for prompting a user to input a username, and entering into a username input state;

(b) receiving a character string from said serial communication unit, remotely processing display of said character string according to a flag variable so as to display said inputted character string, and recording said character string as a username;

(c) sending information for prompting a user to input a password, and entering into a password input state; and

(d) receiving a character string from said serial communication unit, remotely processing display of said character string according to a flag variable so as to hide said inputted character string, and recording said character string as password; and

(3) when said ID verification is successful, putting said AT command module into an AT command processing state, wherein both step (b) and (d) comprise steps of;

reading said received character from a receiving buffer; and

determining whether said received character is password according to said flag variable;

when said received character is password, sending a hidden character to said serial communication unit;

when said received character is not password, sending said character back to said serial communication unit.

2. The method of protecting AT commands, as recited in claim 1, wherein said hidden character is “

*”

.

3. A method of protecting AT commands during the interaction between an AT command module of a mobile terminal and a serial communication unit of an external device, comprising the steps of:

(1) receiving said AT commands from said serial communication unit to said AT command module;

(2) putting said AT command module into an ID verification mode, wherein said AT command module receives a username and password from said serial communication unit in turn, and verifies said received username and password, comprising the steps of;

(a) sending information for prompting a user to input a username, and entering into a username input state;

(b) receiving a character string from said serial communication unit, remotely processing display of said character string according to a flag variable so as to display said inputted character string, and recording said character string as a username;

(c) sending information for prompting a user to input a password, and entering into a password input state; and

(d) receiving a character string from said serial communication unit, remotely processing display of said character string according to a flag variable so as to hide said inputted character string, and recording said character string as password; and

(3) when said ID verification is successful, putting said AT command module into an AT command processing state, wherein both step (b) and (d) comprise steps of;

reading said received character from a receiving buffer in turn;

determining whether said received character is password according to said flag variable;

when said received character is password, determining whether said character is special character;

when said character is not special character, sending a hidden character to said serial communication unit, while when said character is special character, not sending a hidden character to said serial communication unit;

when said received character is not password, sending said character back to said serial communication unit.

4. The method of protecting AT commands, as recited in claim 3, wherein said special character includes a carriage return character and/or a line feed character.

5. A method of protecting AT commands during the interaction between an AT command module of a mobile terminal and a serial communication unit of an external device, comprising the steps of:

(1) receiving said AT commands from said serial communication unit to said AT command module;

(2) putting said AT command module into an ID verification mode, wherein said AT command module receives a username and password from said serial communication unit in turn, and verifies said received username and password, comprising the steps of;

(a) sending information for prompting a user to input a username, and entering into a username input state;

(b) receiving a character string from said serial communication unit, remotely processing display of said character string according to a flag variable so as to display said inputted character string, and recording said character string as a username;

(c) sending information for prompting a user to input a password, and entering into a password input state; and

(d) receiving a character string from said serial communication unit, remotely processing display of said character string according to a flag variable so as to hide said inputted character string, and recording said character string as password; and

(3) when said ID verification is successful, putting said AT command module into an AT command processing state, wherein both step (b) and (d) comprise steps of;

reading said received character from a receiving buffer in turn;

determining whether said received character is password according to said flag variable;

when said received character is password, determining whether said character is special character;

when said character is not special character, sending a hidden character to said serial communication unit, while when said character is special character, setting the flag variable to a non-password state;

when the received character is not password, sending said character back to said serial communication unit.

6. The method of protecting AT commands, as recited in claim 5, wherein said special character includes a carriage return character and/or a line feed character.

7. A method of protecting AT commands during the interaction between an AT command module of a mobile terminal and a serial communication unit of an external device, comprising the steps of:

(1) receiving said AT commands from said serial communication unit to said AT command module;

(2) putting said AT command module into an ID verification mode, wherein said AT command module receives a username and password from said serial communication unit in turn, and verifies said received username and password, comprising the steps of;

(a) sending information for prompting a user to input a username, and entering into a username input state;

(b) receiving a character string from said serial communication unit, remotely processing display of said character string according to a flag variable so as to display said inputted character string, and recording said character string as a username;

(c) sending information for prompting a user to input a password, and entering into a password input state; and

(d) receiving a character string from said serial communication unit, remotely processing display of said character string according to a flag variable so as to hide said inputted character string, and recording said character string as password; and

(3) when said ID verification is successful, putting said AT command module into an AT command processing state, wherein both step (b) and (d) comprise steps of;

reading said received character from a receiving buffer in turn;

determining whether said received character is password according to said flag variable;

when said received character is password, sending a Backspace and a hidden character to said serial communication unit.

8. A method of protecting AT commands during the interaction between an AT command module of a mobile terminal and a serial communication unit of an external device, comprising the steps of:

(1) receiving said AT commands from said serial communication unit to said AT command module;

(2) putting said AT command module into an ID verification mode, wherein said AT command module receives a username and password from said serial communication unit in turn, and verifies said received username and password, comprising the steps of;

(a) sending information for prompting a user to input a username, and entering into a username input state;

(b) receiving a character string from said serial communication unit, remotely processing display of said character string according to a flag variable so as to display said inputted character string, and recording said character string as a username;

(c) sending information for prompting a user to input a password, and entering into a password input state; and

(d) receiving a character string from said serial communication unit, remotely processing display of said character string according to a flag variable so as to hide said inputted character string, and recording said character string as password; and

(3) when said ID verification is successful, putting said AT command module into an AT command processing state, wherein step (d) further comprises a step of setting said flag variable to a non-password state.

9. A method of protecting a mobile terminal from unauthorized AT commands, comprising a step of:

providing an ID verification function to said mobile terminal, which comprises a step of verifying an ID who is trying to control said mobile terminal from an external device via an AT command,

whereby when said ID is verified successful, said AT command is implemented to said mobile terminal, and when said ID is verified unsuccessful, said AT command is not implemented to said mobile terminal, wherein said verifying ID step comprises steps of verifying a username and verifying a password, wherein Local Echo is unset, wherein when verifying said username, said mobile terminal sends inputted characters back to said external device, and when verifying said password, said mobile terminal sends hidden characters back to said external device.

11. The method of controlling a mobile terminal via AT commands, as recited in claim 9, wherein said mobile terminal has a flag variable for indicating whether said inputted character is username or password.

12. The method of controlling a mobile terminal via AT commands, as recited in claim 11, wherein said mobile terminal has a flag variable for indicating whether said inputted character is username or password.

10. A method of protecting a mobile terminal from unauthorized AT commands, comprising a step of:

providing an ID verification function to said mobile terminal, which comprises a step of verifying an ID who is trying to control said mobile terminal from an external device via an AT command,

whereby when said ID is verified successful, said AT command is implemented to said mobile terminal, and when said ID is verified unsuccessful, said AT command is not implemented to said mobile terminal, wherein said verifying ID step comprises steps of verifying a username and verifying a password, wherein Local Echo is set, when said password being inputted, said mobile terminal sends a Backspace and a hidden character back to said external device when receiving each character, otherwise said mobile terminal does not send any character back to said external device.