System and method of authenticating login credentials in a wireless communication system

• US 20070142032A1
• Filed: 12/16/2005
• Published: 06/21/2007
• Est. Priority Date: 12/16/2005
• Status: Active Grant

• Current Assignee: Malikie Innovations Limited (Key Patent Innovations Limited)
• Original Assignee: Blackberry Limited
• Inventors: Balsillie, Jim
• Granted Patent: US 8,005,459 B2
• Time in Patent Office: Days
• US Class Current: 455/411
• CPC Class Codes: H04L 63/083 using passwords cryptographic mechanisms or cryptographic arrangements for entity authentication using a predetermined code H04L9/3226
• CPC Class Codes: H04W 12/06 Authentication
• CPC Class Codes: H04W 12/08 Access security
• CPC Class Codes: H04W 76/30 Connection release

Abstract

A wireless communication system, comprising a host service, a wireless router system coupled to the host service, a wireless network coupling the wireless router system and a wireless mobile communication device (“mobile device”), adaptively delivers data to the mobile device in the wireless communication system. Before logging off a session on the mobile device, the user will be prompted for login credentials (login password). These login credentials may be stored locally on the mobile device or at the host. The login credentials will be use to pre-authenticate the device for the next device session. Upon sensing the next login trigger, service is immediately restored (i.e., logged onto session) with further authentication.

Claims

1. A method of enabling a wireless service session between a host service and a wireless mobile device across a wireless network, comprising the steps of:

detecting a logoff trigger associated with an enabled service session;

providing at least one login credential prior to termination of the enabled service session;

authenticating the at least one login credential provided upon detection of a login trigger associated with a subsequent service session; and

selectively enabling the subsequent service session based on the at least one authenticated login credential

2. The method of claim 1 wherein prior to authenticating the at least one login credential provided upon detection of a login trigger associated with a subsequent service session, the method further comprising storing the at least one login credential provided.

3. The method of claim 2 wherein the steps of storing, authenticating and selectively enabling said service are performed at the host service and wherein the steps of detecting and providing are performed at the mobile device.

4. The method of claim 1 wherein the steps of authenticating and selectively enabling said service are performed at the host service and wherein the steps of detecting and providing are performed at the mobile device.

5. The method of claim 1 wherein the steps of selectively enabling is performed at the host service and wherein the steps of detecting, providing, and authenticating are performed at the mobile device.

6. The method of claim 1 wherein the at least one login credential includes at least one of a login, password, a shared public, a private key, a secret token and a virtual private network (VPN) token.

7. The method of claim 1 wherein providing the at least one login credential prior to termination of the enabled service session is performed at the mobile device and comprises prior to termination of the enabled service session:

displaying a credential entry screen on the mobile device; and

receiving the at least one login credential provided by a user of the mobile device.

8. The method of claim 1 wherein the step of authenticating is performed at the host service and wherein prior to the step of authenticating, the method further comprising sending from the at least one login credential provided from the mobile device to the host service;

10. The method of claim 1 wherein said login credentials is stored at said host service.

11. The method of claim 1 wherein said login credentials is stored at said mobile device.

9. The method of claim I wherein the step of selectively enabling the subsequent service session based on the at least one authenticated login credential comprises providing at least another login credential if authentication of the at least one login credential fails.