Relating to communications

• US 9,161,229 B2
• Filed: 06/12/2009
• Issued: 10/13/2015
• Est. Priority Date: 06/13/2008
• Status: Active Grant

• Current Assignee: Meizu Technology Company Limited
• Original Assignee: Hewlett-Packard Development Company, L.P. (HP Inc.)
• Inventors: Bouckaert, Philippe, Azouz, Nadia, Macheboeuf, Guy
• Primary Examiner(s): Nalven, Andrew
• Assistant Examiner(s): MALINOWSKI, WALTER J
• Application Number:
  US12/997,818
• Publication Number:
  US 20110087782A1
• Time in Patent Office: 2,314 Days
• Field of Search: 455/410, 455/411, 455/435.1, 707781-788, 709223-229, 726 2- 4
• US Class Current: 1/1
• CPC Class Codes: H04L 45/021 Ensuring consistency of routing table updates, e.g. by using epoch numbers
• CPC Class Codes: H04L 63/101 Access control lists [ACL]
• CPC Class Codes: H04W 12/08 Access security
• CPC Class Codes: H04W 12/12 Detection or prevention of fraud
• CPC Class Codes: H04W 12/126 Anti-theft arrangements, e.g. protection against subscriber identity module [SIM] cloning
• CPC Class Codes: H04W 76/11 Allocation or use of connection identifiers
• CPC Class Codes: H04W 8/22 Processing or transfer of terminal data, e.g. status or physical capabilities
• CPC Class Codes: H04W 8/26 Network addressing or numbering for mobility support

Abstract

According to one embodiment of present invention, there is provided a method of controlling access to a communication network. The method includes receiving a request from a communication device to connect to the communication network, the request including a substantially unique identifier of the device, and determining whether the identifier is contained in a local device database of the network. Where it is determined that the identifier is not contained in the local database, the method further includes authorizing the device to connect to the network, and at a subsequent update of the local device database, determining the status of the identifier from a shared device database, and updating the status of the determined identifier in the local device database with the determined status.

Claims

1. A method of controlling access to a communication network, comprising:

receiving a request from a communication device to connect to the communication network, the request including a substantially unique identifier of the communication device;

determining whether the identifier is contained in a local device database of the network; and

where the identifier is not contained in the local device database;

authorizing the communication device to connect to the network;

at a subsequent update of the local device database, determining a status of the identifier from a shared device database; and

updating the status of the identifier in the local device database, wherein the local device database comprises;

a white-list of device identifiers authorized to connect to the network;

a black list of device identifiers not authorized to connect to the network; and

a gray-list of device identifiers authorized to connect to the network but to be monitored;

in which authorizing the communication device to connect to the network comprises determining whether the communication device is authorized to connect to the network by way of the identifier.

2. The method of claim 1, wherein the local device database comprises:

identifiers of devices authorized to connect to the network; and

identifiers of devices not authorized to connect to the network;

in which authorizing the communication device to connect to the network comprises determining whether a received identifier is an identifier which is authorized to connect to the network.

3. The method of claim 1, further comprising where an identifier is not contained in the local device database, marking the identifier such that the status thereof is subsequently retrieved from the shared device database.

4. The method of claim 1, further comprising where the identifier is not contained in the local device database, adding the identifier to the gray-list of the local device database.

5. The method of claim 1, further comprising during updating of the local device database, updating the status of any gray-listed devices with a status stored in the shared device database.

6. The method of claim 5, in which authorizing the communication device to connect to the network comprises denying the communication device connection to the communication network if the identifier of the communication device is classified as a gray-list identifier, and if updating the status of any gray-listed devices with a status stored in the shared device database results in the updating of the communication device as a black-listed communication device.

7. The method of claim 1, in which the method is performed with a mobile telecommunication network.

8. The method of claim 1, in which the device identifiers are international mobile equipment identity numbers, the local device database are an equipment identity register and the shared database is a global IMEI database.

9. A communication system, comprising:

a processor; and

a data storage device communicatively coupled to the processor, the data storage device comprising computer executable code that, when executed by the at least one processor, causes the at least one processor to;

receive a request from a communication device to connect to the communication network, the request including a substantially unique identifier of the communication device;

determine whether the identifier is contained in a local device database of the network; and

where the identifier is not contained in the local device database;

authorize the communication device to connect to the network;

at a subsequent update of the local device database, determine a status of the identifier from a shared device database; and

update the status of the identifier in the local device database, wherein the local device database comprises;

a white-list of device identifiers authorized to connect to the network;

a black list of device identifiers not authorized to connect to the network; and

a gray-list of device identifiers authorized to connect to the network but to be monitored;

in which authorizing the communication device to connect to the network comprises determining whether the communication device is authorized to connect to the network by way of the identifier.

10. The communication system of claim 9, further comprising computer executable code that, when executed by the at least one processor, causes the at least one processor to, where an identifier is not contained in the local device database, marking the identifier such that the status thereof is subsequently retrieved from the shared device database.

11. The communication system of claim 9, further comprising where the identifier is not contained in the local device database, adding the identifier to the gray-list of the local device database.

12. The communication system of claim 9, further comprising during updating of the local device database, updating the status of any gray-listed devices with a status stored in the shared device database.

13. A communication system comprising:

an equipment identity register (EIR); and

a data storage device communicatively coupled to the EIR comprising;

a database of a number of equipment identity register (EIR) entries, the EIR entries comprising a number of international mobile equipment identities (IMEIs), in which, if an IMEI is not contained in the database upon receipt of a request from a communication device to connect to a communication network, the communication system;

authorizes the communication device to connect to the network;

at a subsequent update of the EIR, determines a status of the IMEI from the database; and

updates the status of the identifier in the EIR and handles future connection of the communication device to the network according to the updated status of the identifier, wherein the database comprises;

a white-list of IMEIs authorized to connect to the network;

a black list of IMEIs not authorized to connect to the network; and

a gray-list of IMEIs authorized to connect to the network but to be monitored;

in which authorizing the communication device to connect to the network comprises determining whether the communication device is authorized to connect to the network by way of the IMEI.

14. The communication system of claim 13, in which where an IMEI is not contained in the local device database comprises marking the identifier such that the status thereof is subsequently retrieved from a shared device database.

15. The communication system of claim 13, further comprising where the IMEI is not contained in the database, adding the identifier to the gray-list of the database.

16. The communication system of claim 13, further comprising during updating of the database, updating the status of any gray-listed devices with a status stored in a shared device database.

17. The communication system of claim 16, in which authorizing the communication device to connect to the network comprises denying the communication device connection to the communication network if the identifier of the communication device is classified as a gray-list identifier, and if updating the status of any gray-listed devices with a status stored in the shared device database results in the updating of the communication device as a black-listed communication device.