Authorizing mobile application access to a service through a telecommunication network

• US 9,161,223 B2
• Filed: 04/23/2015
• Issued: 10/13/2015
• Est. Priority Date: 08/26/2012
• Status: Active Grant

• Current Assignee: Vokee Applications Limited
• Original Assignee: Vokee Applications Limited
• Inventors: Barkan, Elad Pinhas
• Primary Examiner(s): MIZRAHI, DIANE D
• Application Number:
  US14/694,822
• Publication Number:
  US 20150230090A1
• Time in Patent Office: 173 Days
• Field of Search: None
• US Class Current: 1/1
• CPC Class Codes: H04L 2101/654 International mobile subscriber identity [IMSI] numbers
• CPC Class Codes: H04L 63/0853 using an additional device, e.g. smartcard, SIM or a different communication terminal cryptographic mechanisms or cryptographic arrangements for entity authentication involving additional secure or trusted devices H04L9/3234
• CPC Class Codes: H04L 63/0876 based on the identity of the terminal or configuration, e.g. MAC address, hardware or software configuration or device fingerprint
• CPC Class Codes: H04L 63/18 using different networks or channels, e.g. using out of band channels cryptographic mechanisms or cryptographic arrangements for key distribution involving distinctive intermediate devices or communication paths H04L9/0827; cryptographic mechanisms or cryptographic arrangements for authentication using a plurality of channels H04L9/3215
• CPC Class Codes: H04M 1/72463 to restrict the functionality of the device
• CPC Class Codes: H04M 1/724631 by limiting the access to the user interface, e.g. locking a touch-screen or a keypad
• CPC Class Codes: H04M 2203/6045 Identity confirmation
• CPC Class Codes: H04M 3/42 Systems providing special services or facilities to subscribers specially adapted for wireless communication networks H04W4/00
• CPC Class Codes: H04M 3/42042 Notifying the called party of information on the calling party details within substation equipment H04M1/57, signalling details H04Q3/72
• CPC Class Codes: H04M 3/42059 Making use of the calling party identifier
• CPC Class Codes: H04M 3/54 Arrangements for diverting calls for one subscriber to another predetermined subscriber based on the calling party profile H04M3/42059; based on location H04M3/42348; based on presence H04M3/42365; to voice mail H04M3/53308
• CPC Class Codes: H04M 7/127 where the session control protocols comprise SIP and SS7
• CPC Class Codes: H04M 7/128 Details of addressing, directories or routing tables
• CPC Class Codes: H04W 12/06 Authentication
• CPC Class Codes: H04W 12/72 Subscriber identity
• CPC Class Codes: H04W 40/02 Communication route or path selection, e.g. power-based or shortest path routing
• CPC Class Codes: H04W 8/04 Registration at HLR or HSS [Home Subscriber Server]
• CPC Class Codes: H04W 8/06 Registration at serving network Location Register, VLR or user mobility server
• CPC Class Codes: H04W 84/042 Public Land Mobile systems, e.g. cellular systems

Abstract

A system for authorizing access to a service by a mobile computing device. The mobile computing device, which is identified by a mobile device identifier, requests authorization to access the service from an application, which has an application instance identifier. A telephone call setup message, which signals a voice call request, is received by the mobile computing device. The mobile computing device disables user interface or notification features of the device prior to receiving the telephone call setup message, and the telephone call setup message is terminated before a voice connection is established with the device. After receiving the telephone call setup message, the mobile computing device sends a communication that causes an association to be made between the mobile device identifier and application instance identifier, enabling authorized access to the service by the device. The mobile computing device then re-enables the user interface or notification features.

Claims

1. In a mobile computing device, a method to securely authorize access to a service by the mobile computing device, the method comprising:

requesting, by a mobile computing device, authorization to access a service from an application of the mobile computing device, wherein the application has an associated application instance identifier and wherein the mobile computing device is identified by a mobile device identifier;

disabling a user interface or a user notification feature of the mobile computing device;

receiving a telephone call setup message directed to the mobile computing device using the mobile device identifier, wherein the telephone call setup message signals a voice call request;

terminating the telephone call setup message before a voice connection is established with the mobile computing device;

in response to receiving the telephone call setup message, sending a communication which causes an association to be made between the application instance identifier and the mobile device identifier, the association enabling authorized access to the service by the mobile computing device;

re-enabling the user interface or the user notification feature of the mobile computing device; and

accessing the service from the mobile computing device.

2. The method of claim 1, wherein the request for authorization to access the service occurs automatically after installation of the application on the mobile computing device.

3. The method of claim 2, wherein the request for authorization to access the service occurs during a period when the mobile computing device is inactive or in response to a manual request from a user of the mobile computing device.

4. The method of claim 1, wherein requesting authorization to access the service further comprises disabling a caller ID blocking feature of the mobile computing device.

5. The method of claim 1, wherein disabling the user interface or user notification feature further comprises displaying a splash screen on the mobile computing device, and wherein re-enabling the user interface or user notification feature further comprises ceasing to display the splash screen on the mobile computing device.

6. The method of claim 1, wherein the telephone call setup message includes signaling to cause a destination to ring but does not involve establishing a voice connection.

7. The method of claim 1, further comprising sending a notification that the user interface or user notification feature has been disabled, wherein the notification indicates that the mobile computing device is ready to receive the telephone call setup message.

8. The method of claim 1, further comprising receiving a notification that the association has been made between the application instance identifier and the mobile device identifier, wherein the notification indicates that the user interface or the user notification feature can be re-enabled.

9. The method of claim 1, wherein the received telephone call setup message includes a selected identifier determined by the service and the sent communication includes a transmitted identifier based on the selected identifier, and wherein making the association between the application instance identifier and the mobile device identifier is based on the selected identifier and the transmitted identifier.

10. The method of claim 9, wherein the selected identifier is included in the telephone call setup message as a caller ID header.

11. A non-transitory computer-readable storage medium encoded with instruction that, when executed by a data processing apparatus, cause the data processing apparatus to perform operations comprising:

requesting authorization to access a service from an application of a mobile computing device, wherein the application has an associated application instance identifier and wherein the mobile computing device is identified by a mobile device identifier;

disabling a user interface or user notification feature of he mobile computing device;

receiving a telephone call setup message directed to the mobile computing device using the mobile device identifier, wherein the telephone call setup message signals a voice call request;

terminating the telephone call setup message before a voice connection is established with the mobile computing device;

in response to receiving the telephone call setup message, sending a communication which causes an association to be made between the application instance identifier and the mobile device identifier, the association enabling authorized access to the service by the mobile computing device;

re-enabling the user interface or the user notification feature of the mobile computing device; and

accessing the service from the mobile computing device.

12. The non-transitory computer-readable storage medium of claim 11, wherein the request for authorization to access the service occurs automatically after installation of the application on the mobile computing device.

13. The non-transitory comouter-readable storage medium of claim 11, wherein the request for authorization to access the service occurs during a period when the mobile computing device is inactive or in response to a manual request from a user of the mobile computing device.

14. The non-transitory computer-readable storage medium of claim 11, wherein requesting authorization to access the service further comprises disabling a caller ID blocking feature of the mobile computing device.

15. The non-transitory computer-readable storage medium of claim 11, wherein disabling the user interface or user notification feature further comprises displaying a splash screen on the mobile computing device, and wherein re-enabling the user interface or user notification feature further comprises ceasing to display the splash screen on the mobile computing device.

16. The non-transitory computer-readable storage medium of claim 11, wherein the telephone call setup message includes signaling to cause a destination to ring but does not involve establishing a voice connection.

17. The non-transitory computer-readable storage medium of claim 11, the operations further comprising sending a notification that the user interface or user notification feature has been disabled, wherein the notification indicates that the mobile computing device is ready to receive the telephone call setup message.

18. The non-transitory computer-readable storage medium of claim 11, the oeprations further comprising receiving a notification that the association has been made between the application instance identifier and the mobile device identifier, wherein the notification indicates that the user interface or the user notification feature can be re-enabled.

19. The non-transitory computer-readable storage medium of claim 11, wherein the received telephone call setup message includes a selected identifier determined by the service and the sent communication includes a transmitted identifier based on the selected identifier, and wherein making the association between the application instance identifier and the mobile device identifier is based on the selected identifier and the transmitted identifier.

20. The non-transitory computer-readable storage medium of claim 19, wherein the selected identifier is included in the telephone call setup message as a caller ID header.