Mobile terminal theft detection system

• US 9,622,082 B2
• Filed: 07/13/2012
• Issued: 04/11/2017
• Est. Priority Date: 09/06/2011
• Status: Active Grant

• Current Assignee: RPX Corporation
• Original Assignee: Alcatel-Lucent SA (Nokia Corporation)
• Inventors: Denhez, Alain
• Primary Examiner(s): Mehra, Inder
• Application Number:
  US14/131,494
• Publication Number:
  US 20140235206A1
• Time in Patent Office: 1,733 Days
• Field of Search: 370328, 370477, 455551, 4555521, 455558, 455411, 455410, 3405681, 340571
• CPC Class Codes: H04W 12/08 Access security
• CPC Class Codes: H04W 12/12 Detection or prevention of fraud
• CPC Class Codes: H04W 12/126 Anti-theft arrangements, e.g. protection against subscriber identity module [SIM] cloning
• CPC Class Codes: H04W 8/22 Processing or transfer of terminal data, e.g. status or physical capabilities

Abstract

To detect the theft of a mobile terminal (TM) connected to a radiocommunication network (RR), a device (DA) capable of communicating with a location register (HLR) initially stores an IMSI identity and an IMEI number for the mobile terminal (TM) together with secret data (DonS) provided by the owner of the mobile terminal. After authentication of the mobile terminal by a network entity, the device retrieves the IMSI identity and IMEI number for the mobile terminal, compares the retrieved IMSI identity and IMEI number with the initially stored IMSI identity and IMEI number, queries the mobile terminal (TM) by asking the user of the mobile terminal to provide the secret data if either the retrieved IMSI identity or IMEI number are different from the initially stored IMSI identity or IMEI number, and detects a theft of the mobile terminal if the secret data provided are different from the initially stored secret data (DonS).

Claims

1. A method to detect the theft of a mobile terminal connected to a radiocommunication network, the method performed by a device operatively coupled to the network and comprising the steps of:

initially storing an IMSI identity and an IMEI number related to the mobile terminal in a database managed by a location register operatively coupled to the network, and initially storing a secret data associated with an owner of the mobile terminal to create a stored IMSI identity, a stored IMEI number and a stored secret data;

after authentication of the mobile terminal, obtaining a retrieved IMSI identity and a retrieved IMEI number retrieved from the mobile terminal during authentication;

comparing the retrieved IMSI identity and the retrieved IMEI number with the stored IMSI identity and the stored IMEI number;

if either the retrieved IMSI identity or the retrieved IMEI number are different from the stored IMSI identity or the stored IMEI number, obtaining entered secret data by sending a query to the mobile terminal requesting entry of secret data;

if the entered secret data is different from the stored secret data, detecting a theft of the mobile terminal.

2. The method of claim 1, further comprising the step of:

after detecting a theft, communicating an alert message indicating that the mobile terminal should be placed on a list.

3. The method of claim 1 further comprising the step of:

if the entered secret data and stored secret data match, the retrieved IMSI identity and the retrieved IMEI number are stored in association with the stored secret data or entered secret data.

4. The method of the claim 1, wherein the entered secret data is entered through a text message.

5. The method of the claim 1, wherein the entered secret data is entered verbally.

6. The method of claim 1, wherein the stored IMSI identity, the stored IMEI number and the stored secret data are stored for a given period and then deleted upon expiration of the given period.

7. The method of claim 6 further comprising the step of:

if the entered secret data and stored secret data match, the retrieved IMSI identity and the retrieved IMEI number are stored in association with the stored secret data or entered secret data.

8. The method of the claim 7, wherein the entered secret data is entered through a text message.

9. The method of the claim 7, wherein the entered secret data is entered verbally.

10. An apparatus, operatively coupled to a radiocommunication network, to detect the theft of a mobile terminal connected to the radiocommunication network, said apparatus further comprising:

storage means for initially storing an IMSI identity and an IMEI number related to the mobile terminal in a database managed by a location register operatively coupled to the network, and for initially storing a secret data associated with an owner of the mobile terminal to create a stored IMSI identity, a stored IMEI number and a stored secret data;

means to obtain a retrieved IMSI identity and a retrieved IMEI number from a network entity capable of communicating with the location register, after authentication of the mobile terminal said retrieved IMSI identity and retrieved IMEI number received from the mobile terminal during authentication;

means to compare the retrieved IMSI identity and the retrieved IMEI number with the stored IMSI identity and the stored IMEI number;

means to query the mobile terminal to obtain entered secret data by requesting entry of secret data, if either the retrieved IMSI identity or the retrieved IMEI number are different from the stored IMSI identity or the stored IMEI number;

means to communicate an alert message, if the entered secret data is different from the stored secret data.

11. The apparatus of claim 10 being included in the location register.

12. The apparatus of claim 10 being included in an equipment identity register.

13. A non-transitory computer-readable storage device storing computer-executable instructions which, when executed by a processor of a computing device, causes the processor perform a method of detecting the theft of a mobile terminal connected to a radiocommunication network when the program is run on a programmable device operatively coupled to the network, the method comprising the steps of:

initially storing an IMSI identity and an IMEI number related to the mobile terminal in a database managed by a location register operatively coupled to the network, and initially storing a secret data associated with an owner of the mobile terminal to create a stored IMSI identity, a stored IMEI number and a stored secret data;

after authentication of the mobile terminal, obtaining a retrieved IMSI identity and a retrieved IMEI number retrieved from the mobile terminal during authentication;

comparing the retrieved IMSI identity and the retrieved IMEI number with the stored IMSI identity and the stored IMEI number;

if either the retrieved IMSI identity or the retrieved IMEI number are different from the stored IMSI identity or the stored IMEI number, obtaining entered secret data by sending a query to the mobile terminal requesting entry of secret data;

if the entered secret data is different from the stored secret data, detecting a theft of the mobile terminal.

14. The non-transitory computer-readable storage device of claim 13 further comprising the step of:

if the entered secret data and stored secret data match, the retrieved IMSI identity and the retrieved IMEI number are stored in association with the stored secret data or entered secret data.

15. The non-transitory computer-readable storage device of the claim 13, wherein the entered secret data is entered through a text message.

16. The non-transitory computer-readable storage device of the claim 13, wherein the entered secret data is entered verbally.

17. The non-transitory computer-readable storage device of claim 13, wherein the stored IMSI identity, the stored IMEI number and the stored secret data are stored for a given period and then deleted upon expiration of the given period.

18. The non-transitory computer-readable storage device of claim 17 further comprising the step of:

if the entered secret data and stored secret data match, the retrieved IMSI identity and the retrieved IMEI number are stored in association with the stored secret data or entered secret data.

19. The non-transitory computer-readable storage device of the claim 18, wherein the entered secret data is entered through a text message.

20. The non-transitory computer-readable storage device of the claim 18, wherein the entered secret data is entered verbally.