Electronic wallet removal from mobile electronic devices

• US 8,768,845 B1
• Filed: 02/16/2009
• Issued: 07/01/2014
• Est. Priority Date: 02/16/2009
• Status: Active Grant

• Current Assignee: T-Mobile Innovations LLC (Deutsche Telekom AG)
• Original Assignee: Sprint Communications Company LP (Deutsche Telekom AG)
• Inventors: Persson, Sarah A. V., Zhu, Kevin, Zhu, Lei
• Primary Examiner(s): OBEID, MAMON A
• Application Number:
  US12/371,901
• Time in Patent Office: 1,961 Days
• Field of Search: 705/64, 705/67, 235/379, 235/380, 455/410, 455/411
• US Class Current: 705/51
• CPC Class Codes: G06F 21/57 Certifying or maintaining trusted computer platforms, e.g. secure boots or power-downs, version controls, system software checks, secure updates or assessing vulnerabilities
• CPC Class Codes: G06F 21/629 to features or functions of an application
• CPC Class Codes: G06F 21/88 Detecting or preventing theft or loss

Abstract

A system for removing an electronic wallet application from a mobile electronic device is provided. The system comprises a first server executing an authentication, authorization, and accounting application and a second server executing a trusted service manager application. The first server grants data network access to the mobile electronic device when a special pass has been provisioned to the first server, wherein the special pass is associated with the mobile electronic device. The second server sends the special pass associated with the mobile electronic device to the first server in response to a triggering event, establishes a data communication session with the mobile electronic device, and sends instructions to the mobile electronic device to remove the electronic wallet application from the mobile electronic device, wherein the establishment of the data communication session is mediated by the authentication, authorization, and accounting application.

Claims

1. A method of removing an electronic wallet application from a mobile electronic device, comprising:

designating the mobile electronic device as one of lost and stolen to an authentication, authorization, and accounting (“

AAA”

) application;

in response to the designating, deprovisioning the mobile electronic device from the AAA application, wherein the deprovisioning comprises removing an identifier associated with the mobile electronic device from a subscriber list to inhibit establishment of data sessions between a trusted service manager and the mobile electronic device;

storing the identifier removed from the subscriber list on a watch list;

subsequent to the deprovisioning, receiving, by the AAA application, a data session origination request from the mobile electronic device;

in response to receiving the data session origination request from the mobile electronic device, determining, by the AAA application, that an identifier provided with the data session origination request matches the identifier stored on the watch list;

in response to determining that the identifier provided with the data session origination request matches the identifier stored on the watch list, informing the trusted service manager of such match determination;

in response to being informed of such match determination, providing, by the trusted service manager, a special pass associated with the mobile electronic device to the AAA application;

establishing a limited data session between the trusted service manager and the mobile electronic device based on the special pass;

sending, by the trusted service manager, a plurality of instructions via the limited data session to the mobile electronic device to lock a secure element of the mobile electronic device and to remove the electronic wallet application from the mobile electronic device; and

receiving, by the trusted service manager from the mobile electronic device, a confirmation that the secure element has been locked and the electronic wallet application has been removed.

2. The method of claim 1, wherein the deprovisioning the mobile electronic device comprises removing at least one of an electronic serial number (ESN) associated with the mobile electronic device and a media access control identification associated with the mobile electronic device from a subscriber list database associated with the AAA application.

3. The method of claim 1, wherein at least some of the instructions execute on the secure element of the mobile electronic device.

4. The method of claim 1, further including deleting the special pass associated with the mobile electronic device from the AAA application after the confirmation is transmitted.

5. The method of claim 1, wherein the instructions sent via the limited data session further remove confidential information from the mobile electronic device.

6. The method of claim 1, wherein the mobile electronic device communicates with the trusted service manager at least in part using a public land mobile network.

7. The method of claim 5, wherein the confidential information comprises at least one of personal contact information, business contact information, bookmarks for content links, schedule data, and notes.

8. The method of claim 1, wherein the mobile electronic device is one of a mobile phone, a personal digital assistant, a media player, a laptop computer, and a tablet computer.

9. The method of claim 1, further comprising the AAA application checking whether a time limit associated with the special pass has expired prior to establishing the limited data session.