Device locator disable authentication

• US 9,706,032 B2
• Filed: 06/06/2013
• Issued: 07/11/2017
• Est. Priority Date: 06/06/2013
• Status: Active Grant

• Current Assignee: Apple Inc.
• Original Assignee: Apple Inc.
• Inventors: Pai, Raghunandan K., Narayanan, Karthik, Chinn, Paul
• Primary Examiner(s): Eng, George
• Assistant Examiner(s): Ahsan, Umair
• Application Number:
  US13/911,732
• Publication Number:
  US 20140364099A1
• Time in Patent Office: 1,496 Days
• Field of Search: 4554041-4042, 455410-411, 455418-419, 4554561-457, 455 261
• CPC Class Codes: G06F 21/44 Program or device authentication
• CPC Class Codes: G06F 21/88 Detecting or preventing theft or loss
• CPC Class Codes: G06F 2221/2103 Challenge-response
• CPC Class Codes: G06F 2221/2111 Location-sensitive, e.g. geographical location, GPS
• CPC Class Codes: G06F 2221/2117 User registration
• CPC Class Codes: G06F 9/44505 Configuring for program initiating, e.g. using registry, configuration files
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 67/52 specially adapted for the location of the user terminal
• CPC Class Codes: H04M 1/724 User interfaces specially adapted for cordless or mobile telephones
• CPC Class Codes: H04W 12/126 Anti-theft arrangements, e.g. protection against subscriber identity module [SIM] cloning
• CPC Class Codes: H04W 4/02 Services making use of location information
• CPC Class Codes: H04W 8/18 Processing of user or subscriber data, e.g. subscribed services, user preferences or user profiles; Transfer of user or subscriber data

Abstract

A device locator mode or find my device (FMD) mode can allow a lost, stolen, or misplaced mobile device to be located. The FMD mode can be enabled or disabled on a mobile device. Sometimes thieves or unauthorized parties attempt to disable the FMD mode. To prevent this, the mobile device can transmit a unique device identifier to a remote server. The remote server can link the device identifier to a cloud-based user account associated with the user of the mobile device. Before an FMD mode is disabled on the mobile device, before the content or settings can be erased, and/or before a mobile device is permitted to be activated/reactivated, a user of the mobile device can be challenged for the credentials of the cloud-based user account. If valid credentials are provided, FMD can be disabled, the content or settings can be reset, and/or the device can be activated/reactivated.

Claims

1. A method comprising:

entering, by a mobile device, an activation operating mode, wherein the mobile device is configured to enable one or more functions in the activation operating mode, and wherein on the mobile device, user-erasable content and settings including one or more user-configured security settings have been erased, the one or more user-configured security settings including a setting for user authentication that specifies that network user credentials stored on a server shall be used for authentication after the user-erasable content and settings have been erased;

while in the activation operating mode, transmitting a request for user account information to the server, the request being associated with a hardware identifier of the mobile device, the hardware identifier uniquely identifying the mobile device to the server, wherein;

the user account information was stored on the server before the one or more user-configured security settings were erased on the mobile device, and

the user account information includes user credentials that are identifiable by the hardware identifier;

presenting, on the mobile device, a user interface for configuring the mobile device, the user interface including a challenge for authenticating a user of the mobile device based on the user account information received from the server; and

in response to receiving an input through the user interface responding to the challenge, activating the mobile device.

2. The method of claim 1, wherein the mobile device is a wiped device on which all user-erasable content and settings are erased.

3. The method of claim 1, wherein entering the activation operating mode of the mobile device is in response to

a user input to erase the user-erasable content and settings.

4. The method of claim 1, wherein the user account information stored on the server is different from user credentials that are local to the mobile device, and activating the mobile device comprises enabling one or more functions that are different from security features.

5. The method of claim 4, wherein a user-configured security setting is erased upon entering, by the mobile device, a device firmware update mode.

6. The method of claim 4, wherein the hardware identifier includes a hash generated based on one or both of a media access control (MAC) address and an international mobile equipment identity (IMEI) of the mobile device.

7. The method of claim 4, comprising limiting functionality of the mobile device until the mobile device is activated.

8. A non-transitory computer-readable medium comprising code that, when executed by a processor, causes a device to perform operations including:

entering, by a mobile device, an activation operating mode, wherein the mobile device is configured to enable one or more functions in the activation operating mode, and wherein on the mobile device, user-erasable content and settings including one or more user-configured security settings have been erased, the one or more user-configured security settings including a setting for user authentication that specifies that network user credentials stored on a server shall be used for authentication after the user-erasable content and settings have been erased;

while in the activation operating mode, transmitting a request for user account information to the server, the request being associated with a hardware identifier of the mobile device, the hardware identifier uniquely identifying the mobile device to the server, wherein;

the user account information was stored on the server before the one or more user-configured security settings were erased on the mobile device, and

the user account information includes user credentials that are identifiable by the hardware identifier;

presenting, on the mobile device, a user interface for configuring the mobile device, the user interface including a challenge for authenticating a user of the mobile device based on the user account information received from the server; and

in response to receiving an input through the user interface responding to the challenge, activating the mobile device.

9. The computer-readable medium of claim 8, wherein the mobile device is a wiped device on which all user-erasable content and settings are erased.

10. A system comprising:

a processor; and

a non-transitory computer-readable medium comprising code that, when executed by the processor, causes the processor to perform operations including;

entering, by a mobile device, an activation operating mode, wherein the mobile device is configured to enable one or more functions in the activation operating mode, and wherein on the mobile device, user-erasable content and settings including one or more user-configured security settings have been erased, the one or more user-configured security settings including a setting for user authentication that specifies that network user credentials stored on a server shall be used for authentication after the user-erasable content and settings have been erased;

while in the activation operating mode, transmitting a request for user account information to the server, the request being associated with a hardware identifier of the mobile device, the hardware identifier uniquely identifying the mobile device to the server, wherein;

the user account information was stored on the server before the one or more user-configured security settings were erased on the mobile device, and

the user account information includes user credentials that are identifiable by the hardware identifier;

presenting on the mobile device, a user interface for configuring the mobile device, the user interface including a challenge for authenticating a user of the mobile device based on the user account information received from the server; and

in response to receiving an input through the user interface responding to the challenge, activating the mobile device.

11. The system of claim 10, wherein entering the activation operating mode of the mobile device is in response to

a user input to erase the user-erasable content and settings.