Checking the access right of a subscriber equipment

• US 6,148,192 A
• Filed: 09/18/1997
• Issued: 11/14/2000
• Est. Priority Date: 05/04/1995
• Status: Expired due to Fees

• Current Assignee: Cassidian Finland OY
• Original Assignee: Nokia Telecommunications Oy (Nokia Corporation)
• Inventors: Ahvenainen, Jouko
• Primary Examiner(s): Bost, Dwayne D.
• Assistant Examiner(s): Trinh, Sonny
• Application Number:
  US08/913,868
• Time in Patent Office: 1,153 Days
• Field of Search: 455/411, 455/433, 455/558, 455/414, 455/415, 455/557, 455/410, 379/88.21, 379/357, 340/825.34
• US Class Current: 455/410
• CPC Class Codes: H04W 12/06 Authentication
• CPC Class Codes: H04W 12/08 Access security
• CPC Class Codes: H04W 12/35 Protecting application or service provisioning, e.g. securing SIM application provisioning
• CPC Class Codes: H04W 12/71 Hardware identity
• CPC Class Codes: H04W 12/72 Subscriber identity

Abstract

A method for checking the access right of a subscriber equipment, whereupon a mobile equipment can be formed by attaching the subscriber identification module to any subscriber equipment. Before the subscriber identification module is detached from the subscriber equipment, the equipment identity of this subscriber equipment is stored in the subscriber identification module. After the subscriber identification module has been connected to the subscriber equipment, the equipment identity stored in the subscriber identification module is compared in the mobile equipment formed with the equipment identity of the subscriber equipment of the combination. When the equipment identities are identical, a first alternative for checking the access right is selected, and when the equipment identities are different, a second alternative for checking the access right is selected.

Claims

1. A method for checking the access right of a subscriber equipment in a mobile telephone system comprising a network infrastructure and a plurality of mobile equipment, each said mobile equipment being a combination of a subscriber equipment provided with an equipment identity and an individual subscriber identification module that is detachably connected to said subscriber equipment, whereupon a mobile equipment can be formed by attaching said subscriber identification module to any subscriber equipment, said method comprising:

before said subscriber identification module is detached from said subscriber equipment, storing said equipment identity of said subscriber equipment in said subscriber identification module;

after said subscriber identification module has been connected to any said subscriber equipment, comparing said equipment identity stored in said subscriber identification module to said equipment identity stored in said subscriber equipment of the combination; and

when said equipment identities are identical, selecting a first alternative for checking the access right; and

when said equipment identities are different, selecting a second alternative for checking the access right.

3. The method according to claim 1, wherein, in said first checking alternatives, registration of said mobile equipment onto said network infrastructure is continued.

4. The method according to claim 1, wherein, in said second checking alternative, the access right of said subscriber equipment is checked by said network infrastructure.

5. The method according to claim 4, wherein, as a result of checking the access right of said subscriber equipment, said subscriber identity of said subscriber equipment is stored in said subscriber identification module and registration of said mobile equipment onto said network infrastructure is continued, if said subscriber equipment has access right to said network infrastructure.

8. The method according to claim 1 or 2, wherein said comparison is performed in said subscriber equipment.

9. The method according to claim 1 or 2, wherein said comparison is performed in said subscriber identification module.

2. A method for checking the access right of a subscriber equipment in a mobile telephone system comprising a network infrastructure and a plurality of mobile equipment, each said mobile equipment being a combination of a subscriber equipment and a subscriber identification module that is provided with a subscriber identity and that is detachably connected to said subscriber equipment, whereupon a mobile equipment can be formed by attaching said subscriber identification module to any subscriber equipment, said method comprising:

before said subscriber identification module is detached from said subscriber equipment, storing said subscriber identity contained in said subscriber identification module in said subscriber equipment;

after said subscriber identification module has been attached to said subscriber equipment, comparing any said subscriber identity stored in said subscriber identification module to said subscriber identity stored in said subscriber equipment of the combination; and

when said subscriber identities are identical, selecting a first alternative for checking the access right, whereupon registration of said mobile equipment onto said network infrastructure is continued, and

when said subscriber identities are different, selecting a second alternative for checking the access right, whereupon the access right of said subscriber equipment is checked by said network infrastructure.

6. The method according to claim 2, wherein, as a result of said checking the access right of said subscriber equipment, said subscriber identity contained in said subscriber identification module is stored in said subscriber equipment, and registration of said mobile equipment onto said network infrastructure is continued, if said subscriber equipment has access right to said network infrastructure.

7. The method according to claim 2 or 4, wherein, as a result of checking the access right of said subscriber equipment, operation of said mobile equipment is terminated, if said subscriber equipment does not have the access right to said network infrastructure.

10. The method for checking the access right of a subscriber equipment in a mobile telephone system comprising a network infrastructure and a plurality of mobile equipment, each said mobile equipment being a combination of a subscriber equipment provided with an equipment identity and an individual subscriber identification module that is detachably connected to said subscriber equipment, whereupon a mobile equipment can be formed by attaching said subscriber identification module to any subscriber equipment, said method comprising:

a) comparing in said mobile equipment said subscriber equipment identity stored in said subscriber identification module with said equipment identity of said subscriber equipment of the combination;

based on said comparison,

b) continuing registration of said mobile equipment onto said network infrastructure, if said subscriber identification module contains said subscriber equipment identity, or

c) checking the access right of said subscriber equipment by said network infrastructure, if said subscriber identification module does not contain said subscriber identity of said subscriber equipment; and

as a result of said checking of access right of said subscriber equipment,

d) storing said subscriber identity of said subscriber equipment in said subscriber identification module and continuing registration of said mobile equipment onto said network infrastructure if said subscriber equipment has access right to said network infrastructure.

12. The method according to claim 10 or 11, wherein, as a result of said checking the access right of said subscriber equipment, operation of said mobile equipment is terminated if said subscriber equipment does not have the access right to said network infrastructure.

13. The method according to claim 10, wherein said comparison of said subscriber equipment identity in said subscriber identification module of said mobile equipment with said equipment identity of said subscriber equipment is performed in said subscriber identification module.

14. The method according to claim 10, wherein said comparison of said subscriber equipment identity in said subscriber identification module of said mobile equipment with said equipment identity of said subscriber equipment is performed in said subscriber equipment.

11. A method for checking the access right of a subscriber equipment in a mobile telephone system comprising a network infrastructure and a plurality of mobile equipment, each said mobile equipment being a combination of a subscriber equipment and a subscriber identification module that is provided with a subscriber identity and that is detachably connected to said subscriber equipment, whereupon a mobile equipment can be formed by attaching said subscriber identification module to any subscriber equipment, said method comprising:

a) comparing in said mobile equipment, said subscriber identity stored in said subscriber identification module with said subscriber identity stored in said subscriber equipment of the combination;

b) continuing based on said comparison, registration of said mobile equipment onto the network infrastructure, if said subscriber identity stored in said subscriber equipment of said combination is identical to said subscriber identity stored in said subscriber identification module, or

c) checking the access right of said subscriber equipment by said network infrastructure, if said subscriber identity stored in said subscriber equipment of said combination is not identical to said subscriber identity stored in said subscriber identification module; and

d) storing said subscriber identity in said subscriber equipment and continuing registration of said mobile equipment onto said network infrastructure, if said subscriber equipment has the access right to said network infrastructure according to said checking of the access right of the subscriber equipment.

15. The method according to claim 11, wherein said comparison of said subscriber identity in said subscriber identification module of said mobile equipment with said subscriber identity in said subscriber equipment is performed in said subscriber identification module.

16. The method according to claim 11, wherein said comparison of said subscriber identity contained in said subscriber identification module of said mobile equipment with said subscriber identity in said subscriber equipment is performed in said subscriber equipment.

17. A mobile equipment, comprising:

a subscriber equipment provided with an equipment identity;

an individual subscriber identification module that is detachably connected to said subscriber equipment; and

means for comparing an equipment identity stored in said subscriber identification module with said equipment identity of said subscriber equipment; and

based on said comparison, when said equipment identities are identical, said means for comparing activating a first alternative for checking an access right, whereupon said mobile equipment continues registration onto a network infrastructure, and when said equipment identities are different, said means for comparing activating a second alternative for checking said access right whereupon said access right of said subscriber equipment is checked by said network infrastructure.

18. The mobile equipment according to claim 17, further comprising:

storing means for storing said equipment identity in said subscriber identification module.

19. The mobile equipment according to claim 18, wherein, in response to checking said access right of said subscriber equipment, said storing means being arranged to store said equipment identity in said subscriber identification module.

20. A mobile equipment, comprising:

a subscriber equipment;

a subscriber identification module that is provided with a subscriber identity and that is detachably connected to said subscriber equipment; and

means for comparing said subscriber identity stored in said subscriber identification module with a subscriber identity stored in said subscriber equipment; and

based on said comparison, when said subscriber identities are identical, said means for comparing activating a first alternative for checking an access right whereupon said mobile equipment continues registration onto a network infrastructure, and when said subscriber identities are different, said means for comparing activating a second alternative for checking said access right whereupon said access right of said subscriber equipment is checked by said network infrastructure.

21. The mobile equipment according to claim 20, further comprising:

storing means for storing said subscriber identity in said subscriber equipment.

22. The mobile equipment according to claim 21, wherein, in response to checking said access right of said subscriber equipment, said storing means being arranged to store said subscriber identity in said subscriber equipment.

23. A mobile equipment, comprising:

a subscriber equipment provided with an equipment identity;

an individual subscriber identification module that is detachably connected to said subscriber equipment;

a comparator which compares an equipment identity stored in said subscriber identification module with said equipment identity of said subscriber equipment; and

based on said comparison, when said equipment identities are identical, said comparator a first alternative for checking an access tight, whereupon said mobile equipment continues registration onto a network infrastructure, and when said equipment identities are different, said comparator a second alternative for checking said access right, whereupon said access right of said subscriber equipment is checked by said network infrastructure.

24. The mobile equipment according to claim 23, further comprising:

a storage device which stores said equipment identity in said subscriber identification module.

25. The mobile equipment according to claim 24, wherein, in response to checking said access right of said subscriber equipment, said storage device being arranged to store said equipment identity in said subscriber identification module.

26. A mobile equipment, comprising:

a subscriber equipment;

a subscriber identification module that is provided with a subscriber identity and that is detachably connected to said subscriber equipment;

a comparator which compares said subscriber identity stored in said subscriber identification module with a subscriber identity stored in said subscriber equipment; and

based on said comparison, when said subscriber identities are identical, said comparator activates a first alternative for checking an access right whereupon said mobile equipment registration onto a network infrastructure, and when said subscriber identities are different, said comparator activates a second alternative for checking said access right whereupon said access right of said subscriber equipment is checked by said network infrastructure.

27. The mobile equipment according to claim 26, further comprising:

a storage device which stores said subscriber identity in said subscriber equipment.

28. The mobile equipment according to claim 26, wherein, in response to checking said access right of said subscriber equipment, said storage device being arranged to store said subscriber identity in said subscriber equipment.