Method and system for delivering a command to a mobile device

• US 9,344,896 B2
• Filed: 07/10/2009
• Issued: 05/17/2016
• Est. Priority Date: 05/12/2009
• Status: Active Grant

• Current Assignee: IQVIA, Inc. (IQVIA Holdings, Inc.)
• Original Assignee: IMS Health Incorporated (IQVIA Holdings, Inc.)
• Inventors: Machani, Salah E.
• Primary Examiner(s): Kasraian, Allahyar
• Application Number:
  US12/500,979
• Publication Number:
  US 20100291899A1
• Time in Patent Office: 2,503 Days
• Field of Search: 455/410, 455/411, 455/418, 455/419, 455/420, 713/167, 713/168, 713/172, 713/183, 713/184
• US Class Current: 1/1
• CPC Class Codes: H04L 63/0838 using one-time-passwords
• CPC Class Codes: H04W 12/06 Authentication
• CPC Class Codes: H04W 12/082 using revocation of authorisation
• CPC Class Codes: H04W 12/12 Detection or prevention of fraud
• CPC Class Codes: H04W 88/02 Terminal devices

Abstract

A method and system for delivering a command to a mobile device is provided. A one-time password is generated using a token shared with a mobile device and one of a challenge and an input string. The one-time password and a command are transmitted, along with the challenge or the input string, to the mobile device for execution thereon.

Claims

1. A computerized method for delivering a command to a mobile device, comprising:

providing in advance a soft token agent to said mobile device, wherein the soft token agent is executable on said mobile device to determine if a one-time password is valid;

receiving a request to transmit said command to said mobile device;

receiving, from a computing device independent of the mobile device, one of a challenge and an input string;

generating a one-time password using a token shared with said mobile device and one of said challenge and said input string; and

transmitting said one-time password and one of said challenge and said input string, along with said command, in a single communication to said mobile device, for determination of validity in said mobile device by the soft token agent of the transmitted one-time password;

wherein said transmitting is performed independent of communications from said mobile device.

2. The method of claim 1, wherein said command is a wipe data command.

3. The method of claim 2, wherein said wipe data command specifies that all data in a memory of said mobile device is to be erased.

4. The method of claim 2, wherein said wipe data command specifies a subset of data on said mobile device is to be erased.

5. The method of claim 1, wherein said command is a wipe security elements command.

6. The method of claim 5, wherein said wipe security elements command specifies a subset of security elements on said mobile device to be erased.

7. The method of claim 1, wherein said command directs said mobile device to establish a call.

8. The method of claim 7, wherein said call is a data call.

9. The method of claim 7, wherein said call is a voice call.

10. The method of claim 1, wherein said command directs said mobile device to advance to a locked state.

11. The method of claim 1, wherein said command directs said mobile device to advance an application to a locked state.

12. The method of claim 1, wherein said transmitting comprises transmitting via short message service.

13. The method of claim 1, wherein said token is a soft token.

14. The method of claim 1, wherein said input string is a random sequence number.