System and method of authenticating login credentials in a wireless communication system

• US 8,005,459 B2
• Filed: 12/16/2005
• Issued: 08/23/2011
• Est. Priority Date: 12/16/2005
• Status: Active Grant

• Current Assignee: Malikie Innovations Limited (Key Patent Innovations Limited)
• Original Assignee: Blackberry Limited
• Inventors: Balsillie, Jim
• Primary Examiner(s): Kincaid; Lester
• Assistant Examiner(s): Lim; Steven
• Application Number:
  US11/305,272
• Publication Number:
  US 20070142032A1
• Time in Patent Office: 2,076 Days
• Field of Search: 455410-411, 455/412.1
• US Class Current: 455/411
• CPC Class Codes: H04L 63/083 using passwords cryptographic mechanisms or cryptographic arrangements for entity authentication using a predetermined code H04L9/3226
• CPC Class Codes: H04W 12/06 Authentication
• CPC Class Codes: H04W 12/08 Access security
• CPC Class Codes: H04W 76/30 Connection release

Abstract

A wireless communication system, comprising a host service, a wireless router system coupled to the host service, a wireless network coupling the wireless router system and a wireless mobile communication device (“mobile device”), adaptively delivers data to the mobile device in the wireless communication system. Before logging off a session on the mobile device, the user will be prompted for login credentials (login password). These login credentials may be stored locally on the mobile device or at the host. The login credentials will be use to pre-authenticate the device for the next device session. Upon sensing the next login trigger, service is immediately restored (i.e., logged onto session) with further authentication.

Claims

1. A method in a wireless mobile device for use in enabling service sessions with a host service via a wireless network, the wireless mobile device including a user input/output (I/O) subsystem which provides a display and a keypad, the method comprising the steps of:

detecting, at the wireless mobile device, a user-initiated logoff trigger for logging off from an enabled service session with the host service, the enabled service session being utilized for a communication of data messages between the host service and the wireless mobile device via the wireless network;

in response to detecting the user-initiated logoff trigger for logging off from the enabled service session with the host service, the wireless mobile device performing the following acts;

prompting with, in the display, an entry screen having at least one field for entry of at least one login credential for use in logging on to a subsequent service session with the host service;

receiving, via the user I/O subsystem, as entered in the at least one field of the, entry screen, the at least one login credential in response to the prompting, and causing the at least one received login credential entered in the at least one field to be saved in memory of the wireless mobile device;

after receiving and saving the at least one login credential, logging off from the enabled service session with the host service;

after the logging off from the enabled service session with the host service, detecting, at the wireless mobile device, a login trigger for logging on to the subsequent service session with the host service, the subsequent service session being utilized for a subsequent communication of data messages between the host service and the wireless mobile device via the wireless network;

in response to detecting the login trigger for logging on to the subsequent service session with the host service, without receipt of authentication input from the user I/O subsystem;

retrieving, from the memory without authentication input from the user I/O subsystem, the at least one login credential that was saved in response to detecting the logoff trigger and before the logging off, and sending it to the host service for authentication; and

wherein the subsequent service session is selectively enabled based on the authentication of the at least one saved authenticated login credential sent to the host service.

2. The method of claim 1 wherein for the enabled and subsequent service sessions utilized for the communication of data messages, the host service is configured to receive the data messages for the wireless mobile device from other devices and cause them to be synchronized with and mirror those at the wireless mobile device.

3. The method of claim 2 wherein the data messages are electronic mail (e-mail) messages.

4. The method of claim 2 wherein the data messages are communicated to and from a Personal Information Manager (PIM) application of the wireless mobile device.

5. The method of claim 1 wherein the at least one saved login credential is retrieved from the memory without prompting, in the display, for the at least one login credential.

6. The method of claim 1 wherein the at least one login credential includes at least one of a login, password, a shared public, a private key, a secret token and a virtual private network (VPN) token.

7. The method of claim 1 wherein the at least one login credential comprises a password.

8. The method of claim 1 wherein the logoff trigger includes an event which comprises turning off a radio of the wireless mobile device and going out of coverage with the wireless mobile device.

9. The method of claim 1 wherein the wireless mobile device and the wireless network are operative in accordance with IEEE 802.11.

10. The method of claim 1 wherein the wireless mobile device comprises a cellular telephone, and the wireless mobile device and the wireless network are operative in accordance with cellular telecommunication standards.

11. A wireless mobile device, comprising:

a processor;

memory coupled to the processor;

a wireless transceiver coupled to the processor and configured for communication with a wireless communication network;

a user input/output (I/O) subsystem which provides a display and a keypad;

the processor being operative to;

detect a user-initiated logoff trigger for logging off from an enabled service session with a host service, the enabled service session being utilized for a communication of data messages between the wireless mobile device and the host service over the wireless communication network via the wireless transceiver;

in response to detecting the user-initiated logoff trigger for logging off from the enabled service session with the host service, perform the following actions;

prompt with, in the display, an entry screen having at least one field for entry of at least one login credential for use in logging on to a subsequent service session with the host service;

receive, via the user I/O subsystem, as entered in the at least one field of the entry screen, the at least one login credential in response to the prompt;

cause the at least one received login credential entered in the at least one field to be saved in the memory; and

after receiving and saving the at least one login credential, log off from the enabled service session with the host service;

after the logging off from the enabled service session with the host service, detect a login trigger for logging on to the subsequent service session with the host service, the subsequent service session being utilized for a subsequent communication of data messages between the host service and the wireless mobile device over the wireless communication network via the wireless transceiver;

in response to detecting the login trigger for logging on to the subsequent service session with the host service, without receipt of authentication input from the user I/O subsystem;

retrieve, from the memory without authentication input from the user I/O subsystem, the at least one login credential that was saved in response to detecting the logoff trigger and before the logging off, and send it, via the wireless transceiver, to the host service for authentication; and

wherein the subsequent service session is selectively enabled based on the authentication of the at least one saved authenticated login credential sent to the host service.

12. The wireless mobile device of claim 11, wherein for the enabled and subsequent service sessions utilized for the communication of data messages, the host service is configured to receive the data messages for the wireless mobile device from other devices and cause them to be synchronized with and mirror those at the wireless mobile device.

13. The wireless mobile device of claim 11, wherein the processor is operative to retrieve, from the memory, the at least one saved login credential without prompting, in the display, for the at least one login credential.

14. The wireless mobile device of claim 11 wherein the at least one login credential includes at least one of a login, password, a shared public, a private key, a secret token and a virtual private network (VPN) token.

15. The wireless mobile device of claim 12 wherein the processor is operative to communicate the data messages to and from a Personal Information Manager (PIM) application of the wireless mobile device.

16. A method in a wireless mobile device for use in enabling service sessions with a host service via a wireless network, the wireless mobile device including a user input/output (I/O) subsystem which provides a display and a keypad, the wireless mobile device further including a personal information manager (PIM) application for synchronizing electronic mail (e-mail) messages between the host service and the wireless mobile device via the wireless network, the method comprising the steps of:

detecting, at the wireless mobile device, a logoff trigger for logging off from an enabled service session with the host service, the enabled service session being utilized for synchronizing the e-mail messages between the host service and the wireless mobile device via the wireless network using the PIM application;

in response to detecting the user-initiated logoff trigger for logging off from the enabled service session with the host service, the wireless mobile device performing the following actions;

prompting with, in the display, an entry screen having at least one field for entry of at least one login credential for subsequent use in logging on to a subsequent service session with the host service;

receiving, via the user I/O subsystem as entered in the at least one field of the entry screen, the at least one login credential, and causing the at least one received login credential entered in the at least one field to be saved in memory of the wireless mobile device;

after receiving and saving the at least one login credential, logging off from the enabled service session with the host service;

after the logging off from the enabled service session with the host service, detecting, at the wireless mobile device, a login trigger for logging in to the subsequent service session with the host service, the subsequent service session being utilized for synchronizing the e-mail messages between the host service and the wireless mobile device using the PIM application;

in response to detecting the login trigger for logging in to the subsequent service session with the host service, without receipt of authentication input from the user I/O subsystem;

retrieving, from the memory without authentication input from the user I/O subsystem, the at least one login credential that was saved in response to detecting the logoff trigger and before the logging off, and sending it to the host service for authentication; and

wherein the subsequent service session is selectively enabled based on the authentication of the at least one saved authenticated login credential received at the host service.

17. The method of claim 16 wherein the logoff trigger includes an event which comprises turning off a radio of the wireless mobile device and going out of coverage with the wireless mobile device.

18. The method of claim 17 wherein wireless mobile device comprises a cellular telephone, and the wireless mobile device and the wireless network are operative in accordance with cellular telecommunication standards.

19. The method of claim 16 wherein the wireless mobile device and the wireless network are operative in accordance with IEEE 802.11.

20. The method of claim 16 wherein the at least one login credential includes at least one of a login, password, a shared public, a private key, a secret token and a virtual private network (VPN) token.