Method and device for providing an identity identifier of an electronic terminal device

• US 9,225,680 B2
• Filed: 05/24/2012
• Issued: 12/29/2015
• Est. Priority Date: 05/24/2011
• Status: Active Grant

• Current Assignee: Vodafone GmbH (Vodafone Group PLC)
• Original Assignee: Vodafone GmbH (Vodafone Group PLC)
• Inventors: Hengels, Erik, Roemer, Arno
• Primary Examiner(s): Vu, Michael T
• Application Number:
  US13/479,605
• Publication Number:
  US 20130035104A1
• Time in Patent Office: 1,314 Days
• Field of Search: 455/450, 455/433, 455/458
• US Class Current: 1/1
• CPC Class Codes: H04L 2101/654 International mobile subscriber identity [IMSI] numbers
• CPC Class Codes: H04L 2463/062 applying encryption of the keys cryptographic mechanisms or cryptographic arrangements for key distribution using key encryption key H04L9/0822
• CPC Class Codes: H04L 61/30 Managing network names, e.g. use of aliases or nicknames name-to-address mapping H04L61/45
• CPC Class Codes: H04L 61/35 involving non-standard use of addresses for implementing network functionalities, e.g. coding subscription information within the address or functional addressing, i.e. assigning an address to a function
• CPC Class Codes: H04L 63/0428 wherein the data content is protected, e.g. by encrypting or encapsulating the payload
• CPC Class Codes: H04L 63/0471 applying encryption by an intermediary, e.g. receiving clear information at the intermediary and encrypting the received information at the intermediary before forwarding
• CPC Class Codes: H04L 63/06 for supporting key management in a packet data network cryptographic mechanisms or cryptographic arrangements for key management H04L9/08
• CPC Class Codes: H04L 63/062 for key distribution, e.g. centrally by trusted party cryptographic mechanisms or cryptographic arrangements for key distribution involving a central third party H04L9/0819
• CPC Class Codes: H04W 12/04 Key management, e.g. using generic bootstrapping architecture [GBA]
• CPC Class Codes: H04W 12/06 Authentication
• CPC Class Codes: H04W 12/08 Access security
• CPC Class Codes: H04W 12/72 Subscriber identity
• CPC Class Codes: H04W 8/265 for initial activation of new user

Abstract

Method for providing an identity identifier of an electronic terminal device. According to the method, via an interface, the electronic device receives a request from the party to provide an identity identifier, which has at least a request identifier. Via a communication link between the electronic terminal device and a server device assigned to the first communication network, a key to encode an identity identifier assigned to the electronic terminal device is transmitted from the server device to the electronic terminal device. By means of the key, at least the identity identifier in the electronic terminal device is encoded. The at least encoded identity identifier is linked to the request identifier received in the electronic terminal device, transmitted from the electronic terminal device to the server device, and decoded in the server device. The decoded identity identifier, together with the linked request identifier, is provided for transmission to the party.

Claims

1. A method for providing an identity identifier of an electronic terminal device that is assigned to a first communication network, particularly a mobile phone network, for a party that is assigned to a second communication network, particularly the Internet,

characterized by the following steps:

a) via an interface, the electronic device, which is assigned to the first communication network, receives a request from the party, which is assigned to the second communication network, to provide an identity identifier, which has at least a request identifier;

b) via a communication link between the electronic terminal device, which is assigned to the first communication network, and a server device assigned to the first communication network, a key to encode an identity identifier assigned to the electronic terminal device is transmitted from the server device to the electronic terminal device, or a key to encode the identity identifier assigned to the electronic terminal device is provided in the electronic terminal device;

c) by means of the key, at least an identity identifier in the electronic terminal device is encoded;

d) the at least encoded identity identifier is linked to the request identifier received in the electronic terminal device, transmitted from the electronic terminal device to the server device, and decoded in the server device;

e) the decoded identity identifier, together with the linked request identifier, is provided, via an interface, for transmission to the party, which is assigned to the second communication network.

2. The method according to claim 1, further characterized in that the decoded identity identifier, together with the linked request identifier, is provided, via an interface assigned to the server device, for transmission to the party.

3. The method according to claim 1, further characterized in that the decoded identity identifier, together with the linked request identifier, is transmitted from the server device to a target system, which is assigned to the first communication network, and that the decoded identity identifier, together with the linked request identifier, is provided, via an interface assigned to the target system, for transmission to the party.

4. The method according to claim 1, further characterized in that the electronic terminal device establishes, by means of a browser or an application, which runs on the electronic terminal device and/or is implemented in it, a communication link between the electronic terminal device and the server device.

5. The method according to claim 1, further characterized in that the communication link between the electronic terminal device and the server device is established via the first communication network and/or via the second communication network.

6. The method according to claim 1, further characterized in that, in the case that, via the communication link between the electronic terminal device and the server device, a key to encode an identity identifier assigned to the electronic terminal device is transmitted from the server device to the electronic terminal device, the electronic terminal device establishes a communication link to the server device, that the electronic terminal device transmits a request for transmission of a key to the server device via the communication link, that a key is produced or provided in the server device, and that the key is transmitted from the server device, via the communication link, to the electronic terminal device.

7. The method according to claim 1, further characterized in that at least the identity identifier is encoded in a chip card application in the electronic terminal device, particularly in a SIM application.

8. The method according to claim 1, further characterized in that, as the identity identifier, an IMSI (International Mobile Subscriber Identity) assigned to the electronic terminal device and/or an MSISDN (Mobile Subscriber Integrated Services Digital Network Number) assigned to the electronic terminal device is encoded.

9. The method according to claim 8, further characterized in that, in the case that, as the identity identifier, an IMSI assigned to the electronic terminal device is encoded, the encoded IMSI is transmitted, via the communication link, from the electronic terminal device to the server device, that at least the IMSI is decoded in the server device, and that, by means of the server device, an MSISDN assigned to the electronic terminal device is assigned to the decoded IMSI as the identity identifier.

15. A device for providing an identity identifier of an electronic terminal device that is assigned to a first communication network, particularly a mobile phone network, for a party that is assigned to a second communication network, particularly the Internet,

characterized by an interface, which is assigned to the electronic terminal device, said interface being adapted for receiving a request from the party, which is assigned to the second communication network, to provide an identity identifier, which has at least a request identifier, a server device, which is assigned to the first communication network, having an interface for producing a communication link between the server device and the electronic terminal device, which is assigned to the first communication network, a device for generating a key for encoding an identity identifier assigned to the electronic terminal device, a device for decoding an identity identifier received by the electronic terminal device, which is linked to a request identifier of the party, which is assigned to the second communication network, with the device further having an interface for transmitting a decoded identity identifier, together with a linked request identifier, to the party, which is assigned to the second communication network, and further characterized in that it has means for carrying out the method according to claim 1 or 10.

10. A method for providing an identity identifier of an electronic terminal device that is assigned to a first communication network, particularly a mobile phone network, for a party that is assigned to a second communication network, particularly the Internet,

characterized by the following steps:

a) the party, which is assigned to the second communication network, transmits a request to provide an identity identifier, which has the at least one request identifier, to the electronic terminal device, which is assigned to the first communication network;

b) via an interface, the electronic device, which is assigned to the first communication network, receives the request from the party, which is assigned to the second communication network;

c) via a communication link between the electronic terminal device, which is assigned to the first communication network, and a server device assigned to the first communication network, a key to encode an identity identifier assigned to the electronic terminal device is transmitted from the server device to the electronic terminal device, or a key to encode an identity identifier assigned to the electronic terminal device is provided in the electronic terminal device;

d) by means of the key, at least the identity identifier is encoded in the electronic terminal device;

e) the at least encoded identity identifier is linked to the request identifier received in the electronic terminal device, transmitted from the electronic terminal device to the server device, and decoded in the server device;

f) the decoded identity identifier, together with the linked request identifier, is transmitted, via an interface, to the party, which is assigned to the second communication network.

11. The method according to claim 10, further characterized in that the decoded identity identifier, together with the linked request identifier, is provided, via an interface assigned to the server device, for transmission to the party.

12. The method according to claim 10, further characterized in that, on the part of the party, the transmitted request identifier is compared to the stored request identifiers and that, if the request identifiers agree, the identity identifier linked to the transmitted request identifier is assigned to a request that is linked to the stored request identifier.

13. The method according to claim 10, further characterized in that the decoded identity identifier, together with the linked request identifier, is transmitted, via an interface and a communications line assigned to the interface, to the party.

14. A device for providing an identity identifier of an electronic terminal device that is assigned to a first communication network, particularly a mobile phone network, for a party that is assigned to a second communication network, particularly the Internet,

characterized by a server device, which is assigned to the first communication network, having an interface for producing a communication link between the server device and an electronic terminal device, which is assigned to the first communication network, a device for generating a key for encoding an identity identifier assigned to the electronic terminal device, a device for decoding an identity identifier received by the electronic terminal device, which is linked to a request identifier of the party, which is assigned to the second communication network, with the device further having an interface for transmitting the decoded identity identifier, together with the linked request identifier, to the party, which is assigned to the second communication network.