Method and apparatus for controlling utilization of a process added to a portable communication device

• US 5,612,682 A
• Filed: 05/30/1995
• Issued: 03/18/1997
• Est. Priority Date: 05/30/1995
• Status: Expired due to Term

• Current Assignee: Google Technology Holdings LLC (Alphabet Inc.)
• Original Assignee: Motorola, Inc. (Motorola Solutions, Inc.)
• Inventors: Smoot, George W., DeLuca, Michael J., Kraul, Douglas R.
• Primary Examiner(s): Horabik, Michael
• Assistant Examiner(s): MERZ, EDWARD W
• Application Number:
  US08/452,785
• Time in Patent Office: 658 Days
• Field of Search: 340/825.34, 340/825.44, 340/825.33, 340/825.35, 340/825.22, 379/57, 395/200.01, 395/200.05
• US Class Current: 340/5.74
• CPC Class Codes: G06Q 10/1091 Recording time for administrative or management purposes
• CPC Class Codes: H04L 63/101 Access control lists [ACL]
• CPC Class Codes: H04W 12/06 Authentication
• CPC Class Codes: H04W 12/08 Access security
• CPC Class Codes: H04W 88/02 Terminal devices

Abstract

A method and apparatus in a communication system operated by a service provider controls utilization of a module (602, 606) added to a portable communication device (122) including a transceiver (302) which communicates with a fixed portion (102) of the communication system. The portable communication device (122) receives (604) a request for utilization of the module. In response, the portable communication device (122) acts (612) to obtain a usage authorization for utilizing the module. The portable communication device (122) disallows (640) the utilization of the module, in response to the usage authorization being unobtainable.

Claims

1. A method in a communication system operated by a service provider, the method for controlling utilization of a module added to a portable communication device comprising a transceiver which communicates with a fixed portion of the communication system, the method comprising in the portable communication device the steps of:

receiving a request for utilization of the module;

in response, acting to obtain a usage authorization for utilizing the module; and

disallowing the utilization of the module, in response to the usage authorization being unobtainable.

2. The method of claim 1,

wherein the step of acting to obtain the usage authorization comprises the steps of:

allowing the utilization of the module; and

thereafter acting to obtain the usage authorization through a first radio channel of the communication system, and

wherein the disallowing step comprises the step of;

disabling further utilization of the module, in response to receiving a "not authorized" signal through a second radio channel of the communication system.

3. The method of claim 1,

wherein the step of acting to obtain the usage authorization comprises the steps of:

making a determination of whether an internal authorization exists for utilizing the module, the determination made from an authorization record stored in the portable communication device; and

obtaining the usage authorization from the internal authorization, in response to the internal authorization being present in the authorization record, and

wherein the method further comprises the step of;

allowing the utilization of the module, in response to the usage authorization being obtained.

4. The method of claim 1,

wherein the module is user-installed, and

wherein the step of acting to obtain the usage authorization comprises the steps of:

physically sending an authorization medium to the service provider, and

in response, obtaining the usage authorization by receiving an external authorization from the service provider through a radio channel of the communication system, and

wherein the method further comprises the step of;

allowing the utilization of the module, in response to the usage authorization being obtained.

5. The method of claim 1,

wherein the usage authorization comprises information indicative of a time at which the usage authorization will expire, and

wherein the method comprises the steps of:

allowing the utilization of the module in response to obtaining the usage authorization, and

disabling further utilization of the module in response to an expiration of the usage authorization.

6. A portable communication device in a communication system operated by a service provider, the portable communication device for controlling utilization of a module added thereto, the portable communication device comprising:

a transceiver for communicating with a fixed portion of the communication system;

a processor coupled to the transceiver for controlling the portable communication device;

a memory coupled to the processor for storing information used by the portable communication device;

user controls coupled to the processor for receiving a request for utilization of the module;

an authorization element coupled to the processor for acting to obtain a usage authorization for utilizing the module; and

a disallower element coupled to the processor for disallowing the utilization of the module, in response to the usage authorization being unobtainable.

7. The portable communication device of claim 6,

wherein the authorization element comprises:

a first allower element for allowing the utilization of the module; and

a radio authorizer element coupled to the first allower element for acting to obtain the usage authorization through a first radio channel of the communication system, and

wherein the disallower element comprises;

a first disabler element coupled to the radio authorizer element for disabling further utilization of the module, in response to receiving a "not authorized" signal through a second radio channel of the communication system.

8. The portable communication device of claim 6,

wherein the authorization element comprises:

a determination element for making a determination of whether an internal authorization exists for utilizing the module, the determination made from an authorization record stored in the portable communication device; and

an internal authorizer element coupled to the determination element for obtaining the usage authorization from the internal authorization, in response to the internal authorization being present in the authorization record, and

wherein the portable communication device further comprises;

a second allower element coupled to the internal authorizer element for allowing the utilization of the module, in response to the usage authorization being obtained.

9. The portable communication device of claim 6,

wherein the module is user-installed, and

wherein an authorization medium is physically sent to the service provider to obtain authorization, and

wherein the authorization element comprises:

an external authorizer element for obtaining the usage authorization by receiving an external authorization from the service provider through a radio channel of the communication system, and

wherein the portable communication device further comprises;

a second allower element coupled to the external authorizer element for allowing the utilization of the module, in response to the usage authorization being obtained.

10. The portable communication device of claim 6,

wherein the usage authorization comprises information indicative of a time at which the usage authorization will expire, and

wherein the portable communication device comprises:

a second allower element coupled to the authorization element for allowing the utilization of the module in response to obtaining the usage authorization, and

a third disabler element coupled to the second allower element for disabling further utilization of the module in response to an expiration of the usage authorization.

11. A controller for use in a fixed portion of a communication system, the controller comprising:

a processor for controlling operation of the controller;

a memory coupled to the processor for storing information used by the controller;

a transmitter interface coupled to the processor for transmitting a message to a portable communication device;

a receiver interface coupled to the processor for receiving a communication from the portable communication device;

apparatus, for authorizing utilization;

of a process added to the portable communication device, the apparatus comprising;

a process lister element coupled to the processor maintaining in the memory a list of authorized processes corresponding to the portable communication device;

a request receiver element coupled to the processor for receiving a request for an external authorization from the portable communication device, the request comprising at least a process name and a process size corresponding to a process, along with a secure checksum and an address identifying the portable communication device;

a list checker element coupled to the processor for checking the list of authorized processes corresponding to the portable communication device identified by the address, to determine whether the module corresponding to the module name is authorized;

an external authorization element coupled to the processor for transmitting the external authorization to the portable communication device in response to the module being authorized for the portable communication device; and

an authorization denial element coupled to the processor for transmitting a "not authorized" signal to the portable communication device in response to the process not being authorized for the portable communication device.

12. A method in a communication system operated by a service provider, the method for controlling utilization of a process added to a portable communication device comprising a transceiver which communicates with a fixed portion of the communication system, the method comprising in the portable communication device the steps of:

receiving a request for utilization of the process;

in response, acting to obtain a usage authorization for utilizing the process by

making a determination of whether an internal authorization exists for utilizing the process, the determination made from an authorization record stored in the portable communication device, and

communicating with the fixed portion to obtain the usage authorization as an external authorization, in response to the internal authorization being absent from the authorization record;

allowing the utilization of the process, in response to the usage authorization being obtained; and

disallowing the utilization of the process, in response to the usage authorization being unobtainable.

13. The method of claim 12,

wherein the process comprises a hardware module,

wherein the step of allowing the utilization of the process comprises the step of performing the process in accordance with circuits of the hardware module, and

wherein the communicating step comprises the step of transmitting to the fixed portion a signal indicative of the hardware module.

14. The method of claim 12,

wherein the process comprises a software module,

wherein the step of allowing the utilization of the process comprises the step of performing the process in accordance with instructions of the software module, and

wherein the communicating step comprises the step of transmitting to the fixed portion a signal indicative of the software module.

15. The method of claim 14, wherein the transmitting step comprises the steps of:

performing an algorithm on at least a portion of bytes of the software module to calculate a secure checksum value therefor; and

sending at least a module name and a module size corresponding to the software module, along with the secure checksum value.

16. A portable communication device in a communication system operated by a service provider, the portable communication device for controlling utilization of a process added thereto, the portable communication device comprising:

a transceiver for communicating with a fixed portion of the communication system;

a processor coupled to the transceiver for controlling the portable communication device;

a memory coupled to the processor for storing information used by the portable communication device;

user controls coupled to the processor for receiving a request for utilization of the process;

an authorization element coupled to the processor for acting to obtain a usage authorization for utilizing the process, the authorization element comprising;

a determination element for making a determination of whether an internal authorization exists for utilizing the process, the determination made from an authorization record stored in the portable communication device, and

a radio authorizer element coupled to the determination element for communicating with the fixed portion to obtain the usage authorization as an external authorization, in response to the internal authorization being absent from the authorization record;

a second allower element coupled to the radio authorizer element for allowing the utilization of the process, in response to the usage authorization being obtained; and

a disallower element coupled to the processor for disallowing the utilization of the process, in response to the usage authorization being unobtainable.

17. The portable communication device of claim 16, wherein the process comprises a hardware module, and

wherein the second allower element comprises a hardware performer element coupled to the processor for performing the process in accordance with circuits of the hardware module, and

wherein the radio authorizer element comprises a transmitter controller element coupled to a secure checksum calculator element for transmitting to the fixed portion a signal indicative of the hardware module.

18. The portable communication device of claim 16, wherein the process comprises a software module, and

wherein the second allower element comprises a software performer element coupled to the processor for performing the process in accordance with instructions of the software module, and

wherein the radio authorizer element comprises a transmitter controller element coupled to a secure checksum calculator element for transmitting to the fixed portion a signal indicative of the software module.

19. The portable communication device of claim 18, wherein the transmitter controller element comprises:

a secure checksum calculator element coupled to the software module for performing an algorithm on at least a portion of bytes of the software module to calculate a secure checksum value therefor; and

a sender element coupled to the processor for sending at least a module name and a module size corresponding to the software module, along with the secure checksum value.

20. A method in a communication system operated by a service provider, the method for controlling utilization of a process added to a portable communication device comprising a transceiver which communicates with a fixed portion of the communication system, the method comprising in the portable communication device the steps of:

receiving a request for utilization of the process;

allowing the utilization of the process;

thereafter acting to obtain a usage authorization through a first radio channel of the communication system; and

disabling further utilization of the process, in response to receiving no external authorization reply through a second radio channel of the communication system within a predetermined time interval after the step of acting to obtain the usage authorization through the first radio channel is executed.

21. A method in a communication system operated by a service provider, the method for controlling utilization of a process added to a portable communication device comprising a transceiver which communicates with a fixed portion of the communication system, the method comprising in the portable communication device the steps of:

receiving a request for utilization of the process;

in response, acting to obtain a usage authorization from the fixed portion of the communication system for utilizing the process;

in the fixed portion of the communication system comprising the steps of;

maintaining a list of authorized processes corresponding to the portable communication device,

receiving a request for an external authorization from the portable communication device, the request comprising at least a process name and a process size corresponding to the process, along with a secure checksum and an address identifying the portable communication device,

checking the list of authorized processes corresponding to the portable communication device identified by the address, to determine whether the process corresponding to the process name is authorized,

transmitting the external authorization to the portable communication device in response to the process being authorized for the portable communication device,

transmitting a "not authorized" signal to the portable communication device in response to the process not being authorized for the portable communication device;

allowing the utilization of the process, in response to the usage authorization being obtained; and

disallowing the utilization of the process, in response to the usage authorization being unobtainable.

22. A method in a communication system operated by a service provider, the method for controlling utilization of a process added to a portable communication device comprising a transceiver which communicates with a fixed portion of the communication system, the method comprising in the portable communication device the steps of:

receiving a request for utilization of the process, wherein the process comprises a software module;

in response, acting to obtain a usage authorization for utilizing the process;

creating an internal authorization in response to obtaining an external authorization, comprising the step of generating a process verification from selected bytes of the software module, wherein the generating step comprises the steps of;

choosing the selected bytes of the software module by an address pointer defined by a random process,

thereafter performing on the software module an algorithm responsive to the selected bytes to calculate a checksum value, wherein the checksum value and the address pointer become a portion of the process verification, and

thereafter storing the internal authorization in an authorization record, comprising the step of placing the process verification into the authorization record as a portion of the internal authorization; and

allowing the utilization of the process, in response to the usage authorization being obtained.

23. A portable communication device in a communication system operated by a service provider, the portable communication device for controlling utilization of a process added thereto, the portable communication device comprising:

a transceiver for communicating with a fixed portion of the communication system;

a processor coupled to the transceiver for controlling the portable communication device;

a memory coupled to the processor for storing information used by the portable communication device;

user controls coupled to the processor for receiving a request for utilization of the process;

an authorization element coupled to the processor for acting to obtain a usage authorization for utilizing the process, the authorization element comprising;

a first allower element for allowing the utilization of the process, and

a radio authorizer element coupled to the first allower element for acting to obtain the usage authorization through a first radio channel of the communication system; and

a disallower element coupled to the processor for disallowing the utilization of the process, in response to the usage authorization being unobtainable, the disallower element comprising a second disabler element coupled to the radio authorizer element for disabling further utilization of the process, in response to receiving no external authorization reply through a second radio channel of the communication system within a predetermined time interval after the radio authorizer element acts to obtain the usage authorization through the first radio channel.

24. A portable communication device in a communication system operated by a service provider, the portable communication device for controlling utilization of a process added thereto, the portable communication device comprising:

a transceiver for communicating with a fixed portion of the communication system;

a processor coupled to the transceiver for controlling the portable communication device;

a memory coupled to the processor for storing information used by the portable communication device;

user controls coupled to the processor for receiving a request for utilization of the process;

an authorization element coupled to the processor for acting to obtain a usage authorization for utilizing the process, wherein the process comprises a software module;

a creator element for creating an internal authorization in response to obtaining an external authorization, comprising a generator element for generating a process verification from selected bytes of the software module, wherein the generator element comprises;

a chooser element for choosing the selected bytes of the software module by an address pointer defined by a random process; and

a checksum calculator element coupled to the chooser element for performing on the software module an algorithm responsive to the selected bytes to calculate a checksum value, wherein the checksum value and the address pointer become a portion of the process verification, and

a storer element coupled to the creator element for storing the internal authorization in an authorization record in the memory, the storer element comprising a placer element for placing the process verification into the authorization record as a portion of the internal authorization; and

a disallower element coupled to the processor for disallowing the utilization of the process, in response to the usage authorization being unobtainable.