Over the air locking of user identity modules for mobile telephones

• US 5,809,413 A
• Filed: 12/19/1996
• Issued: 09/15/1998
• Est. Priority Date: 08/04/1995
• Status: Expired due to Term

• Current Assignee: Nokia Technologies Oy (Nokia Corporation)
• Original Assignee: Nokia Mobile Phones UK Limited (Nokia Corporation)
• Inventors: Vaisanen, Ahti, Meche, Paul S.
• Primary Examiner(s): Bost, Dwayne
• Assistant Examiner(s): MAUNG, NAY AUNG
• Application Number:
  US08/769,541
• Time in Patent Office: 635 Days
• Field of Search: 379/58, 379/59, 379/62, 379/91, 455/33.1, 455/410, 455/411, 455/424, 455/426, 455/558, 455/560, 380/23, 235/380
• US Class Current: 455/411
• CPC Class Codes: H04W 12/06 Authentication
• CPC Class Codes: H04W 8/22 Processing or transfer of terminal data, e.g. status or physical capabilities
• CPC Class Codes: H04W 88/02 Terminal devices

Abstract

A mobile telephone network in which user identify module (UIM) locking is activated automatically by the network via signalling over the base station to mobile telephone common air interface. The telephone network periodically or regularly queries the Internal Mobile Equipment Identity (IMEI) of the mobile telephone being used by subscribers on the system. If the IMEI of a mobile telephone is found on a `stolen list` the network may then command the mobile station to activate UIM locking by messaging to and from the mobile telephone over the air interface to activate the UIM locking function using a transmitted bit pattern.

Claims

1. In a telecommunications network including a switching network and a plurality of mobile terminals, each of the mobile terminals capable of operation with each of a plurality of removable user identity modules, a method for locking a selected mobile terminal to a selected user identity module that is contained within the selected mobile terminal, said method comprising the steps of:

receiving a message at the selected mobile terminal, said message transmit from the switching network; and

,

in response to receiving said message at the selected mobile terminal;

locking the selected mobile terminal to the selected user identity module, wherein operation of the selected mobile terminal in the telecommunications network with any user identity modules other than the selected identity module is prevented.

2. The method of claim 1, wherein the selected mobile station is associated with an identity parameter unique to the selected mobile terminal in the telecommunications network and said message received in said step of receiving comprises a second message, and, wherein said method further comprises, before said step of receiving, the steps of:

receiving a first message at the switching network, said first message transmitted from the selected mobile station and including the identity parameter of the selected mobile terminal,

determining, in response to receiving said first message, whether the identity parameter of the selected mobile terminal is stored in a select data base within the switching network; and

in response to a positive determination in said step of determining;

transmitting said second message from the switching network to the selected mobile terminal.

3. The method of claim 1, wherein said step of locking comprises the steps of:

verifying the authenticity of said message received in said step of receiving; and

in response to a verification that said message is authentic;

locking the selected mobile terminal to the selected user identity module, wherein operation of the selected mobile terminal in the telecommunications network with any other user identity module is prevented.

4. The method of claim 1, wherein said message comprises a first message and said method further comprises the steps of:

transmitting a second message from the switching network to the selected mobile terminal;

and, in response to receiving said second message at the selected mobile terminal;

locking the selected user identity module to the selected mobile terminal, wherein operation of the selected user identity module in the telecommunications network with any mobile terminal other than said selected mobile terminal is prevented.

5. In a telecommunications network including a switching network and a plurality of mobile terminals, each of the mobile terminals capable of operation with each of a plurality of removable user identity modules, a method for locking a selected user identity module to a selected mobile terminal that contains the selected user identity module, said method comprising the steps of:

transmitting a message from the switching network to the selected mobile terminal; and

in response to receiving said message at the selected mobile terminal,

locking the selected user identity module to the selected mobile terminal, wherein operation of the selected user identity module in the telecommunications network with any mobile terminal other than the selected mobile terminal is prevented.

6. The method of claim 5, wherein the selected mobile station is associated with an identity parameter unique to the selected mobile terminal in the telecommunications network and said message received in said step of receiving comprises a second message, and, wherein said method further comprises, before said step of receiving, the steps of:

receiving a first message at the switching network, said first message transmit from the selected mobile terminal and including the identity parameter of the selected mobile terminal,

determining, in response to receiving said first message, whether the identity parameter of the selected mobile terminal is stored in a selected data base within the switching network; and

in response to a positive determination in said step of determining;

transmitting said second message from the switching network to the selected mobile terminal.

7. The method of claim 5, wherein said step of locking comprises the steps of:

verifying the authenticity of said message received in said step of receiving; and

in response to a verification that said message is authentic;

locking the selected user identity module to the selected mobile terminal, wherein operation of the selected user identity module in the telecommunications network with any mobile terminal other than the selected mobile terminal is prevented.

8. The method of claim 5, wherein said message comprises a first message and said method further comprises the steps of:

transmitting a second message from the switching network to the selected mobile terminal; and

in response to receiving said second message at the selected mobile terminal;

locking the selected mobile terminal to the selected user identity module, wherein operation of the selected mobile terminal in the telecommunications network with any user identity module other than the selected user identity module is prevented.

9. In a telecommunications network including a switching network and a plurality of mobile terminals, each of the mobile terminals capable of operation with each of a plurality of removable user identity modules, wherein a selected mobile terminal is capable of being locked to a selected user module that is contained within the selected mobile terminal, preventing operation of the select mobile terminal in the telecommunications network with any other user identity module, a method for unlocking the selected mobile terminal from the selected user identity module, said method comprising the steps of:

receiving a message at the selected mobile terminal, said message transmit from the switching network; and

,

in response to receiving said message at the selected mobile terminal;

unlocking the selected mobile terminal from the selected user identity module, wherein operation of the select mobile terminal in the telecommunications network with any other user identity module is allowed.

10. The method of claim 9, wherein the selected mobile station is associated with an identity parameter unique to the selected mobile terminal in the telecommunications network and said message received in said step of receiving comprises a second message, and, wherein said method further comprises, before said step of receiving, the steps of:

receiving a first message at the switching network, said first message transmit from the select mobile terminal and including the identity parameter of the select mobile terminal;

determining, in response to receiving said first message, whether the identity parameter of the select mobile terminal is stored in a select data base within the switching network; and

in response to a positive determination in said step of determining;

transmitting said second message from the switching network to the select mobile terminal.

11. The method of claim 9, wherein said step of unlocking comprises the steps of:

verifying the authenticity of said message received in said step of receiving; and

in response to a verification that said message is authentic;

unlocking the selected mobile terminal from the selected user identity module, wherein operation of the select mobile terminal in the telecommunications network with any other user identity module is allowed.

12. The method of claim 9, wherein the selected user identity module is capable of being locked to the selected mobile terminal, preventing operation of the user identity module in the telecommunications network with any other mobile terminal, and wherein said method further comprises the steps of:

transmitting a second message from the switching network to the selected mobile terminal;

and, in response to receiving said second message at the selected mobile terminal;

unlocking the selected user identity module from the selected mobile terminal, wherein operation of the user identity module in the telecommunications network with any other mobile terminal is allowed.

13. In a telecommunications network including a switching network and a plurality of mobile terminals, each of the mobile terminals capable of operation with each of a plurality of removable user identity modules, wherein a selected user identity module is capable of being locked to a selected mobile terminal, preventing operation of the user identity module in the telecommunications network with any other mobile terminal, a method for unlocking the selected user identity module from the selected mobile terminal, said method comprising the steps of:

receiving a message at the selected mobile terminal, said message transmit from the switching network;

and, in response to receiving said message at the selected mobile terminal,

unlocking the selected user identity module from the selected mobile terminal, wherein operation of the selected user identity module in the telecommunications network with any other mobile terminal is allowed.

14. The method of claim 13, wherein the selected mobile station is associated with an identity parameter unique to the selected mobile terminal in the telecommunications network and said message received in said step of receiving comprises a second message, and, wherein said method further comprises, before said step of receiving, the steps of:

receiving a first message at the switching network, said first message transmit from the selected mobile terminal and including the identity parameter of the selected mobile terminal;

determining, in response to receiving said first message, whether the identity parameter of the selected mobile station is stored in a select data base within the switching network; and

in response to a positive determination in said step of determining;

transmitting said second message from the switching network to the selected mobile terminal.

15. The method of claim 13, wherein said step of unlocking comprises the steps of:

verifying the authenticity of said message received in said step of receiving; and

in response to a verification that said message is authentic;

unlocking the user selected identity module from the selected mobile terminal, wherein operation of the selected user identity module in the telecommunications network with any other mobile terminal is allowed.

16. The method of claim 13, wherein the selected mobile terminal is capable of being locked to the selected user identity module preventing operation of the selected mobile terminal with any other user module, and said message comprises a first message and wherein said method further comprises the steps of:

receiving a second message at the selected mobile terminal, said message transmitted from the switching network; and

in response to receiving said second message at the selected mobile terminal;

unlocking the selected mobile terminal from the selected user identity module, wherein operation of the selected mobile terminal in the telecommunications network with any other user identity module is allowed.

17. In a telecommunications network including a switching network and a plurality of mobile terminals, each of the mobile terminals capable of operation with each of a plurality of removable user identity modules, an apparatus for locking a selected mobile terminal, said apparatus comprising:

means for receiving a message transmitted from the switching network to the selected mobile terminal; and

means for locking, in response to receiving said message, the mobile terminal to a selected user identity module contained in the selected mobile terminal, wherein operation of the selected mobile terminal in the telecommunications network with any identity modules other than the selected identity module is prevented.

18. The apparatus of claim 17, wherein said message comprises a second message and the selected mobile station is associated with an identity parameter unique to the selected mobile terminal in the telecommunications system, and wherein said apparatus further comprises:

means for receiving a first message transmitted from the selected mobile station at the switching network, wherein said first message includes the identity parameter of the selected mobile terminal;

means for determining, in response to receiving said first message in said means for receiving, whether the identity parameter of the selected mobile terminal is stored in a data base within the switching network; and

means for transmitting, in response to a positive determination being made in said means for determining, said second message from the switching network to the selected mobile terminal.

19. The apparatus of claim 17, wherein said means for locking comprises:

means for verifying the authenticity of said message received in said means for receiving; and

means for locking, in response to a verification that said message is authentic in said means for verifying, the mobile terminal to a selected user identity module contained in the selected mobile terminal, wherein operation of the selected mobile terminal in the telecommunications network with any identity modules other than the selected identity module is prevented.

20. The apparatus of claim 17, wherein said message comprises a first message and said apparatus further comprises:

means for transmitting a second message from the switching network to the selected mobile terminal; and

,

means for locking, in response to receiving said second message at the means for receiving, the selected user identity module to the selected mobile terminal, wherein operation of the selected user identity module in the telecommunications network with any mobile terminal other than said selected mobile terminal is prevented.

21. In a telecommunications network including a switching network and a plurality of mobile terminals, each of the mobile terminals capable of operation with each of a plurality of removable user identity modules, an apparatus for locking a selected user identity module to a selected mobile terminal, said apparatus comprising:

means for transmitting a message from the switching network to the selected mobile terminal; and

means for locking, in response to receiving said message, the selected user identity module to the selected mobile terminal, wherein operation of the selected user identity module in the telecommunications network with any mobile terminal other than the selected mobile terminal is prevented.

22. The apparatus of claim 21, wherein said message comprises a second message and the selected mobile station is associated with an identity parameter unique to the selected mobile terminal in the telecommunications system, and wherein said apparatus further comprises:

means for receiving a first message transmitted from the selected mobile station at the switching network, wherein said first message includes the identity parameter of the selected mobile terminal;

means for determining, in response to receiving said first message in said means for receiving, whether the identity parameter of the selected mobile terminal is stored in a data base within the switching network; and

means for transmitting, in response to a positive determination being made in said means for determining, said second message from the switching network to the selected mobile terminal.

23. The apparatus of claim 21, wherein said means for locking comprises:

means for verifying the authenticity of said message received in said means for receiving; and

means for locking, in response to a verification that said message is authentic in said means for verifying, the selected user identity module to the selected mobile terminal, wherein operation of the selected user identity module in the telecommunications network with any mobile terminal other than the selected mobile terminal is prevented.

24. The apparatus of claim 21, wherein said message comprises a first message and said apparatus further comprises:

means for transmitting a second message from the switching network to the selected mobile terminal; and

,

means for locking, in response to receiving said second message at the means for receiving, the selected mobile terminal to the selected user identity module, wherein operation of the selected mobile terminal in the telecommunications network with any other than said selected user identity module is prevented.

32. The apparatus of claim 21, wherein said means for locking further comprises means for locking, in response to receiving said second message at the means for receiving, the selected mobile terminal to the selected user identity module, wherein operation of the selected mobile terminal in the telecommunications network with any other than said selected user identity module is prevented and said message comprises a first message and, wherein said apparatus further comprises:

means for transmitting a second message from the switching network to the selected mobile terminal; and

,

means for unlocking, in response to receiving said second message at the means for receiving, the selected mobile terminal from the selected user identity module wherein operation of the selected mobile terminal in the telecommunications network with any other than said selected user identity module is allowed.

25. In a telecommunications network including a switching network and a plurality of mobile terminals, each of the mobile terminals capable of operation with each of a plurality of removable user identity modules, an apparatus for locking and unlocking a selected mobile terminal, said apparatus comprising:

means for locking the mobile terminal to a selected user identity module contained in the selected mobile terminal, wherein operation of the selected mobile terminal in the telecommunications network with any user identity modules other than the selected identity module is prevented;

means for receiving a message transmitted from the switching network to the selected mobile terminal; and

means for unlocking, in response to receiving said message, the mobile terminal to a selected user identity module contained in the selected mobile terminal, wherein operation of the selected mobile terminal in the telecommunications network with any identity modules other than the selected identity module is allowed.

26. The apparatus of claim 25, wherein said message comprises a second message and the selected mobile terminal is associated with an identity parameter unique to the selected mobile terminal in the telecommunications system, and wherein said apparatus further comprises:

means for receiving a first message transmitted from the selected mobile terminal at the switching network, wherein said first message includes the identity parameter of the selected mobile station;

means for determining, in response to receiving said first message in said means for receiving, whether the identity parameter of the selected mobile terminal is stored in a data base within the switching network; and

means for transmitting, in response to a positive determination being made in said means for determining, said second message from the switching network to the selected mobile terminal.

27. The apparatus of claim 25, wherein said means for unlocking comprises:

means for verifying the authenticity of said message received in said means for receiving; and

means for unlocking, in response to a verification that said message is authentic in said means for verifying, the mobile terminal from a selected user identity module contained in the selected mobile terminal, wherein operation of the selected mobile terminal in the telecommunications network with any identity modules other than the selected identity module is allowed.

28. The apparatus of claim 25, wherein said message comprises a first message and said means for locking further comprises means for locking the selected user identity module to the selected mobile terminal, wherein operation of the selected user identity module in the telecommunications network with any mobile terminal other than said selected mobile terminal is prevented, and said apparatus further comprises:

means for transmitting a second message from the switching network to the selected mobile terminal; and

,

means for unlocking, in response to receiving said second message at the means for receiving, the selected user identity module from the selected mobile terminal, wherein operation of the selected user identity module in the telecommunications network with any mobile terminal other than said selected mobile terminal is allowed.

29. In a telecommunications network including a switching network and a plurality of mobile terminals, each of the mobile terminals capable of operation with each of a plurality of removable user identity modules, an apparatus for locking and unlocking a selected user identity module, said apparatus comprising:

means for locking, in response to receiving said message, the selected user identity module to the selected mobile terminal, wherein operation of the selected user identity module in the telecommunications network with any mobile terminal other than the selected mobile terminal is prevented;

means for transmitting a message from the switching network to the selected mobile terminal; and

means for unlocking, in response to receiving said message, the selected user identity module to the selected mobile terminal, wherein operation of the selected user identity module in the telecommunications network with any mobile terminal other than the selected mobile terminal is allowed.

30. The apparatus of claim 29, wherein said message comprises a second message and the selected mobile station is associated with an identity parameter unique to the selected mobile terminal in the telecommunications system, and wherein said apparatus further comprises:

means for receiving a first message transmitted from the selected mobile terminal at the switching network, wherein said first message includes the identity parameter of the selected mobile terminal;

means for determining, in response to receiving said first message in said means for receiving, whether the identity parameter of the selected mobile station is stored in a data base within the switching network; and

means for transmitting, in response to a positive determination being made in said means for determining, said second message from the switching network to the selected mobile terminal.

31. The apparatus of claim 29, wherein said means for unlocking comprises:

means for verifying the authenticity of said message received in said means for receiving; and

means for unlocking, in response to a verification that said message is authentic in said means for verifying, the selected user identity module to the selected mobile terminal, wherein operation of the selected user identity module in the telecommunications network with any mobile terminal other than the selected mobile terminal is allowed.