System and method for managing identity information after a SIM swap

• US 9,154,939 B2
• Filed: 09/30/2011
• Issued: 10/06/2015
• Est. Priority Date: 06/01/2011
• Status: Active Grant

• Current Assignee: Malikie Innovations Limited (Key Patent Innovations Limited)
• Original Assignee: Blackberry Limited
• Inventors: Markov, Nikolay Tzankov, Bukurak, David, Canton, Raymond Lee, Chidambaram, Avinash, Panezic, Alan
• Primary Examiner(s): Fang, Keith
• Application Number:
  US13/250,830
• Publication Number:
  US 20120309353A1
• Time in Patent Office: 1,467 Days
• US Class Current: 1/1
• CPC Class Codes: H04L 63/083 using passwords cryptographic mechanisms or cryptographic arrangements for entity authentication using a predetermined code H04L9/3226
• CPC Class Codes: H04W 12/06 Authentication
• CPC Class Codes: H04W 8/183 Processing at user equipment or user record carrier
• CPC Class Codes: H04W 8/20 Transfer of user or subscriber data

Abstract

A system and a method are provided managing services associated with a mobile device. It includes detecting a new identity module card is in the mobile device; receiving a username ID and a password on the mobile device; and upon verifying that the username ID and the password are identical to a previous username ID and a previous password associated with the mobile device, the mobile device enabling access to the services. In another aspect, after detecting a new identity module card, and if an input is received to associate a new username ID and a new password with the mobile device, then the services are erased from the mobile device.

Claims

1. A method of managing one or more services associated with a mobile device, the method comprising:

detecting the mobile device is logged into a first username identifier (ID) account that is currently associated with the mobile device while an identity module card is in the mobile device;

detecting a new identity module card in the mobile device has replaced the identity module card that was previously used, the new identity module having a different identification compared to the identity module card that was previously used;

responsive to detecting the new identity module card;

logging out of the first username ID account;

displaying a reference username ID associated with the first username ID account that is currently associated with the mobile device;

providing an option to log back into the first username ID account using the reference username ID, including displaying a field to receive a reference authentication value associated with the reference username ID;

sending the identification of the new identity module card and a mobile device ID to a server, and receiving from the server a confirmation of whether or not the identification of the new identity module card is new, wherein the server comprises a database storing one or more known combinations of mobile device IDs and identifications of identity module cards, and if the identification of the new identity module card cannot be found in association with the mobile device ID on the database, the server returns the confirmation that the identification of the new identity module is new;

providing an option to use a new username ID associated with a second username ID account, the new username ID being different compared to the reference username ID;

responsive to receiving an input to associate the new username ID with the mobile device, erasing a portion of a memory associated with the mobile device, after verifying that the username ID and the authentication value are identical to the reference username ID and the reference authentication value associated with the mobile device, determining a level of access to one or more of the services associated with the mobile device, the one more services comprising the service;

associating the new username ID with the mobile device; and

displaying a message describing the level of access to the one or more services.

2. The method of claim 1 wherein the portion of the memory is associated with the one or more services.

3. The method of claim 1 wherein the new identity module card is any one of a subscriber identity module (SIM) card, a removable user identity module (RUIM) card, or a universal subscriber identity module (USIM) card.

4. The method of claim 1 further comprising the mobile device displaying a message indicating that the new identity module card is detected.

5. The method of claim 1 wherein the option to use the new username ID further includes using a new authentication value, the new authentication value being different compared to the reference authentication value;

and wherein the input to associate the new username ID with the mobile device includes associating the new authentication value with the mobile device.

6. The method of claim 5 further comprising, after receiving the new username ID and the new authentication value, the mobile device providing access to the one or more services based on at least one of:

the new username ID, a mobile device ID, or an identification of the new identity module card.

7. A method of managing a service associated with a mobile device, the method comprising:

detecting the mobile device is logged into a first username identifier (ID) account that is currently associated with the mobile device while an identity module card is in the mobile device;

detecting a new identity module card in the mobile device has replaced the identity module card that was previously used, the new identity module having a different identification compared to the identity module card that was previously used;

responsive to detecting the new identity module card;

logging out of the first username ID account;

displaying a username ID currently associated with the first username ID account that is currently associated with the mobile device and a field to receive an authentication value;

receiving the authentication value via the mobile device;

providing an option to log back into the first username ID account using a reference username ID, including displaying a field to receive a reference authentication value associated with the reference username ID;

sending the identification of the new identity module card and a mobile device ID to a server, and receiving from the server a confirmation of whether or not the identification of the new identity module card is new, wherein the server comprises a database storing one or more known combinations of mobile device IDs and identifications of identity module cards, and if the identification of the new identity module card cannot be found in association with the mobile device ID on the database, the server returns the confirmation that the identification of the new identity module is new;

after verifying that the username ID and the authentication value are identical to the reference username ID and a reference authentication value associated with the mobile device, logging back into the first username ID account and enabling access to a service using the new identity module card and without erasing a portion of a memory on the mobile device associated with the username ID, after verifying that the username ID and the authentication value are identical to the reference username ID and the reference authentication value associated with the mobile device, determining a level of access to one or more of the services associated with the mobile device, the one more services comprising the service; and

displaying a message describing the level of access to the one or more services.

8. The method of claim 7 wherein the new identity module card is any one of a subscriber identity module (SIM) card, a removable user identity module (RUIM) card, or a universal subscriber identity module (USIM) card.

9. The method of claim 7 further comprising the mobile device displaying a message indicating that the new identity module card is detected.

10. The method of claim 7 further comprising sending the username ID and the authentication value to a server, and receiving from the server an indication of whether or not the username ID and the authentication value are verified.

11. The method of claim 7 further comprising, after verifying that the username ID and the authentication value are not identical to the reference username ID and the reference authentication value associated with the mobile device, denying access to the service.

12. The method of claim 7 wherein the level of access is determined based on the new identity module card.

13. A mobile device comprising a non-transitory computer readable medium, the non-transitory computer readable medium comprising computer executable instructions for managing a service associated with the mobile device, the computer executable instructions comprising:

detecting the mobile device is logged into a first username identifier (ID) account that is currently associated with the mobile device while an identity module card is in the mobile device;

detecting a new identity module card in the mobile device has replaced the identity module card that was previously used, the new identity module having a different identification compared to the identity module card that was previously used;

responsive to detecting the new identity module card;

logging out of the first username ID account;

displaying a username ID currently associated with the first username ID account that is currently associated with the mobile device and a field to receive an authentication value;

receiving the authentication value via the mobile device;

providing an option to log back into the first username ID account using a reference username ID, including displaying a field to receive a reference authentication value associated with the reference username ID;

sending the identification of the new identity module card and a mobile device ID to a server, and receiving from the server a confirmation of whether or not the identification of the new identity module card is new, wherein the server comprises a database storing one or more known combinations of mobile device IDs and identifications of identity module cards, and if the identification of the new identity module card cannot be found in association with the mobile device ID on the database, the server returns the confirmation that the identification of the new identity module is new;

after verifying that the username ID and the authentication value are identical to the reference username ID and a reference authentication value associated with the mobile device, logging back into the first username ID account and enabling access to a service using the new identity module card and without erasing a portion of a memory on the mobile device associated with the username ID, after verifying that the username ID and the authentication value are identical to the reference username ID and the reference authentication value associated with the mobile device, determining a level of access to one or more of the services associated with the mobile device, the one more services comprising the service; and

displaying a message describing the level of access to the one or more services.

14. The mobile device of claim 13 wherein the new identity module card is any one of a subscriber identity module (SIM) card, a removable user identity module (RUIM) card, or a universal subscriber identity module (USIM) card.

15. The mobile device of claim 13 wherein the computer executable instructions further comprises the mobile device displaying a message indicating that the new identity module card is detected.

16. A non-transitory computer readable medium comprising computer executable instructions for managing a service associated with a mobile device, the computer executable instructions comprising:

detecting the mobile device is logged into a first username identifier (ID) account that is currently associated with the mobile device while an identity module card is in the mobile device;

detecting a new identity module card in the mobile device has replaced the identity module card that was previously used, the new identity module having a different identification compared to the identity module card that was previously used;

responsive to detecting the new identity module card;

logging out of the first username ID account;

displaying a username ID currently associated with the first username ID account that is currently associated with the mobile device and a field to receive an authentication value;

receiving the authentication value via the mobile device;

providing an option to log back into the first username ID account using a reference username ID, including displaying a field to receive a reference authentication value associated with the reference username ID;

sending the identification of the new identity module card and a mobile device ID to a server, and receiving from the server a confirmation of whether or not the identification of the new identity module card is new, wherein the server comprises a database storing one or more known combinations of mobile device IDs and identifications of identity module cards, and if the identification of the new identity module card cannot be found in association with the mobile device ID on the database, the server returns the confirmation that the identification of the new identity module is new;

after verifying that the username ID and the authentication value are identical to the reference username ID and a reference authentication value associated with the mobile device, logging back into the first username ID account and enabling access to a service using the new identity module card and without erasing a portion of a memory on the mobile device associated with the username ID, after verifying that the username ID and the authentication value are identical to the reference username ID and the reference authentication value associated with the mobile device, determining a level of access to one or more of the services associated with the mobile device, the one more services comprising the service; and

displaying a message describing the level of access to the one or more services.

17. A non-transitory computer readable medium comprising computer executable instructions for managing one or more services associated with a mobile device, the computer

detecting the mobile device is logged into a first username identifier (ID) account that is currently associated with the mobile device while an identity module card is in the mobile device;

detecting a new identity module card in the mobile device has replaced the identity module card that was previously used, the new identity module having a different identification compared to the identity module card that was previously used;

responsive to detecting the new identity module card;

logging out of the first username ID account;

displaying a reference username ID associated with the first username ID account that is currently associated with the mobile device;

providing an option to log back into the first username ID account using the reference username ID, including displaying a field to receive a reference authentication value associated with the reference username ID;

sending the identification of the new identity module card and a mobile device ID to a server, and receiving from the server a confirmation of whether or not the identification of the new identity module card is new, wherein the server comprises a database storing one or more known combinations of mobile device IDs and identifications of identity module cards, and if the identification of the new identity module card cannot be found in association with the mobile device ID on the database, the server returns the confirmation that the identification of the new identity module is new;

providing an option to use a new username ID associated with a second username ID account, the new username ID being different compared to the reference username ID;

responsive to receiving an input to associate the new username ID with the mobile device, erasing a portion of a memory associated with the mobile device, after verifying that the username ID and the authentication value are identical to the reference username ID and the reference authentication value associated with the mobile device, determining a level of access to one or more of the services associated with the mobile device, the one more services comprising the service;

associating the new username ID with the mobile device; and

displaying a message describing the level of access to the one or more services.

18. A mobile device comprising a non-transitory computer readable medium, the non-transitory computer readable medium comprising computer executable instructions managing one or more services associated with a mobile device, the computer executable instructions comprising:

detecting the mobile device is logged into a first username identifier (ID) account that is currently associated with the mobile device while an identity module card is in the mobile device;

detecting a new identity module card in the mobile device has replaced the identity module card that was previously used, the new identity module having a different identification compared to the identity module card that was previously used;

responsive to detecting the new identity module card;

logging out of the first username ID account;

displaying a reference username ID associated with the first username ID account that is currently associated with the mobile device;

providing an option to log back into the first username ID account using the reference username ID, including displaying a field to receive a reference authentication value associated with the reference username ID;

sending the identification of the new identity module card and a mobile device ID to a server, and receiving from the server a confirmation of whether or not the identification of the new identity module card is new, wherein the server comprises a database storing one or more known combinations of mobile device IDs and identifications of identity module cards, and if the identification of the new identity module card cannot be found in association with the mobile device ID on the database, the server returns the confirmation that the identification of the new identity module is new;

providing an option to use a new username ID associated with a second username ID account, the new username ID being different compared to the reference username ID;

responsive to receiving an input to associate the new username ID with the mobile device, erasing a portion of a memory associated with the mobile device, after verifying that the username ID and the authentication value are identical to the reference username ID and the reference authentication value associated with the mobile device, determining a level of access to one or more of the services associated with the mobile device, the one more services comprising the service;

associating the new username ID with the mobile device; and

displaying a message describing the level of access to the one or more services.