Identity module for terminal equipment using prepaid applications

• US 7,437,181 B2
• Filed: 05/29/2003
• Issued: 10/14/2008
• Est. Priority Date: 08/28/2002
• Status: Active Grant

• Current Assignee: Nokia Technologies Oy (Nokia Corporation)
• Original Assignee: Nokia Corporation
• Inventors: Simmons, Clayton
• Primary Examiner(s): Mehrpour, Melody
• Application Number:
  US10/449,138
• Publication Number:
  US 20040043792A1
• Time in Patent Office: 1,965 Days
• Field of Search: 455/558, 455/550.1, 455/435, 455/420, 455/560, 455/561, 455/557, 455/41, 455/344, 455/426, 455/432, 709/249, 709/220, 710/10
• US Class Current: 455/558
• CPC Class Codes: H04M 15/47 Fraud detection or prevention means
• CPC Class Codes: H04M 15/48 Secure or trusted billing, e.g. trusted elements or encryption
• CPC Class Codes: H04M 17/103 using SIMs (USIMs) or calling cards
• CPC Class Codes: H04M 2017/12 using calling, telephone credit/debit cards
• CPC Class Codes: H04M 2215/0148 Fraud detection or prevention means
• CPC Class Codes: H04M 2215/0156 Secure and trusted billing, e.g. trusted elements, encryption, digital signature, codes or double check mechanisms to secure billing calculation and information
• CPC Class Codes: H04M 2215/2026 Wireless network, e.g. GSM, PCS, TACS
• CPC Class Codes: H04M 2215/32 Involving wireless systems
• CPC Class Codes: H04W 4/24 Accounting or billing
• CPC Class Codes: H04W 88/02 Terminal devices

Abstract

A system according to an embodiment of this invention provides for binding an identification card to terminal equipment so that the card cannot be used in any other equipment. A unique challenge will be initiated by the ID card to externally authenticate the terminal device by generating a random value and sending it to the terminal device (the longer the value the more secure the challenge will be). While the terminal device is executing this random value it received form the ID card, the ID card will perform it=s own computation using the same algorithm the terminal device has and the random value it sent to the terminal device plus a fixed key programmed in the ID card, whose value matches that of the fixed key in the terminal device. If the terminal device=s response value which is passed back to the ID card matches the response value generated in the ID card, computation then the ID card is then free to initialize according to the GSM specifications. If the value is different, then the ID card may report to the end-user that the terminal device used is invalid.

Claims

1. A method for linking an identification (ID) unit having at least computation means and nonvolatile memory means with a terminal device so that the identification unit can only be used in a terminal device that satisfies a test, the method comprising:

generating a parameter in the ID unit;

sending the parameter from the ID unit to the terminal device;

receiving the parameter by the terminal device;

processing the parameter by the terminal device with a terminal device key utilizing an algorithm to generate a terminal response;

processing said parameter in the ID unit using said algorithm and said terminal device key to generate an ID reference;

comparing said terminal response and said ID reference; and

initializing the terminal device it said terminal response matches said ID reference.

2. The method of claim 1 further comprising

returning said terminal reference to the ID unit;

and performing the comparison in said ID unit.

3. The method of claim 1, in which said ID unit is a removable unit having a standard mechanical and electrical interface.

4. The method of claim 3, in which said ID unit is a smart card.

5. The method of claim 1, in which at least one of said key and said algorithm is unique to said terminal device and to said ID unit whereby said terminal device and said ID unit only work together.

6. The method of claim 5 further comprising

returning said terminal response to the ID unit;

and performing the comparison in said ID unit.

7. The method of claim 5, in which said ID unit is a removable unit having a standard mechanical and electrical interface.

8. The method of claim 3, in which said ID unit is a smart card.

9. The method of claim 1, in which said terminal device is a telephone ME, said terminal device key is fixed during manufacture of said ME and said ID unit contains a set of keys and means for specifying at least one of said set of keys.

10. The method of claim 9, in which said step of specifying at least one of said set of keys comprises processing an identifying parameter stored in said terminal device.

11. The method of claim 10, in which said ID unit is a removable unit having a standard mechanical and electrical interface.

12. The method of claim 11, in which said ID unit is a smart card.

25. The method of claim 9, in which at least one of said set of keys in said ID unit is adapted for use with a ME communicating with a telephone network and at least one other of said set of keys is adapted for use with a second system other than a telephone network.

26. The method of claim 25, in which said second system is a vending system for vending a product.

13. A system comprising a terminal device and means for linking an identification (ID) unit having at least computation means and nonvolatile memory means with said terminal device so that the identification unit can only be used in a terminal device that satisfies a test, the system comprising means for:

generating a parameter in the ID unit;

sending the parameter from the ID unit to the terminal device;

receiving the parameter by the terminal device;

processing the parameter by the terminal device with a terminal device key utilizing an algorithm to generate a terminal response;

processing said parameter in the ID unit using said algorithm and said terminal device key to generate an ID reference;

comparing said terminal response and said ID reference; and

initializing the terminal device if said terminal response matches said ID reference.

14. The system of claim 13 further comprising means for:

returning said terminal response to the ID unit; and

performing the comparison in said ID unit.

15. The system of claim 13, in which said ID unit is a removable unit having a standard mechanical and electrical interface.

16. The system of claim 15, in which said ID unit is a smart card.

17. The system of claim 13, in which at least one of said key and said algorithm is unique to said terminal device and to said ID unit, whereby said terminal device and said ID unit only work together.

18. The system of claim 17 further comprising means for:

returning said terminal reference to the ID unit; and

performing the comparison in said ID unit.

19. The system of claim 17, in which said ID unit is a removable unit having a standard mechanical and electrical interface.

20. The system of claim 19, in which said ID unit is a smart card.

21. The system of claim 13, in which said key is fixed during manufacture of said terminal device and said ID unit contains a set of keys and means for specifying at least one of said set of keys.

22. The system of claim 21, in which said means for specifying at least one of said set of keys comprises processing an identifying parameter stored in said terminal device.

23. The system of claim 21, in which said ID unit is a removable unit having a standard mechanical and electrical interface.

24. The system of claim 23, in which said ID unit is a smart card.

27. A program storage medium readable by an identification unit comprising a computer program and a nonvolatile memory configured to communicate with a terminal device so that the identification unit can only be used in a device that satisfies a test, the medium embodying instructions executable by a computer for practicing a method comprising:

generating a parameter in the ID unit;

sending the parameter from the ID unit to the terminal device;

receiving the parameter by the terminal device;

processing the parameter by the terminal device with a terminal device key utilizing an algorithm to generate a terminal response;

processing said parameter in the ID unit using said algorithm and said terminal device key to generate an ID reference;

comparing said terminal response and said ID reference; and

initializing the terminal device if said terminal response matches said ID reference.

28. The program storage medium of claim 27, further comprising the step of

returning said terminal reference to the ID unit;

and

performing the comparison in said ID Unit.

29. The program storage medium of claim 28, in which said ID unit is a removable unit having a standard mechanical and electrical interface.

30. The program storage medium of claim 29, in which said ID unit is a smart card.

31. The program storage medium of claim 27, in which at least one of said key and said algorithm is unique to said terminal device and to said ID unit, whereby said terminal device and said ID unit only work together.

32. The program storage medium of claim 31, in which said terminal device is a telephone ME, said terminal device key is fixed during manufacture of said ME and said ID unit contains a set of keys and means for specifying at least one of said set of keys.