Maintaining mobile terminal information for secure communications

• US 8,805,334 B2
• Filed: 09/05/2008
• Issued: 08/12/2014
• Est. Priority Date: 11/22/2004
• Status: Expired due to Fees

• Current Assignee: Seven Networks Inc
• Original Assignee: Seven Networks Inc
• Inventors: Groeber, Marcus, Vuornos, Lauri, Salorinne, Seppo, Saarlilahti, Antti, Ketonen, Marko, Salmi, Petri, Backholm, Ari, Ahonen, Jukka
• Primary Examiner(s): NGUYEN, KHAI MINH
• Application Number:
  US12/205,747
• Publication Number:
  US 20090054034A1
• Time in Patent Office: 2,167 Days
• Field of Search: 455/466, 455/413, 455/410, 455/411, 455/412.1, 455/412.2, 455/414.1, 455/414.4, 713/150, 713/168, 709/206
• US Class Current: 455/413
• CPC Class Codes: H04L 51/58 Message adaptation for wireless communication
• CPC Class Codes: H04L 63/0428 wherein the data content is protected, e.g. by encrypting or encapsulating the payload
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 63/18 using different networks or channels, e.g. using out of band channels cryptographic mechanisms or cryptographic arrangements for key distribution involving distinctive intermediate devices or communication paths H04L9/0827; cryptographic mechanisms or cryptographic arrangements for authentication using a plurality of channels H04L9/3215
• CPC Class Codes: H04W 12/02 Protecting privacy or anonymity, e.g. protecting personally identifiable information [PII]
• CPC Class Codes: H04W 12/033 of the user plane, e.g. user's traffic
• CPC Class Codes: H04W 12/06 Authentication
• CPC Class Codes: H04W 4/12 Messaging; Mailboxes; Announcements

Abstract

Methods and systems for maintaining mobile terminal information for secure email communications are provided. Information concerning multiple mobile terminals are maintained. Such information may include encryption information and an identifier for each mobile terminal. A service activation code that includes encryption information and an identifier from an authenticated user of the mobile terminal is received. The encryption information may be provided to a connectivity function for use in establishing an encrypted data channel. The established encrypted data channel may then be used to convey e-mail communications to and from the mobile terminal.

Claims

1. A method for securing communications with a mobile terminal, the method comprising:

maintaining information concerning a plurality of mobile terminals, the information comprising encryption information for each mobile terminal;

wherein, the encryption information is derived from a service activation code received from a user of a mobile terminal of the plurality of mobile terminals,

wherein, the service activation code is provided by the mobile terminal off-line to prevent eavesdropping before a secure communication channel is established;

communicating with the mobile terminal via the secure communication channel that is established using the service activation code;

wherein, the mobile terminal has a permanent terminal identity and a temporary identity.

2. The method of claim 1, wherein the encryption information is based on an equipment identity of the mobile terminal.

3. The method of claim 1, further comprising, authenticating the user of the mobile terminal using the service activation code off-line.

4. The method of claim 3, wherein the encryption information is displayed on a display of the mobile terminal for entry at an authenticating terminal by the user.

5. The method of claim 4, wherein the display of the mobile terminal provides the encryption information to the user for manual entry at the authenticating terminal.

6. The method of claim 1, further comprising registering the service activation code with the connectivity function.

7. The method of claim 1, wherein the service activation code further comprises a checksum for determining validity of the service activation code.

8. The method of claim 1, further comprising receiving service provisioning settings from the connectivity function.

9. The method of claim 1, wherein, the encryption information includes an encryption key.

10. The method of claim 9, wherein, the encryption key an identifier of the mobile terminal are encoded into the service activation key.

11. The method of claim 1, wherein, the service activation code is generated by the mobile terminal based on an encryption key, an identifier of the mobile terminal and a checksum.

12. A system for securing communications with a mobile terminal, the system comprising:

a host system configured to receive a service activation code to authenticate the user of the mobile terminal;

wherein, the mobile terminal has a permanent terminal identity and a temporary identity;

wherein, encryption information is derived from a service activation code, that is provided offline to the host server to prevent eavesdropping prior to establishing a secure communications channel;

wherein, the secure communications channel is established for communications with the mobile terminal using the encryption information derived from the service activation code;

wherein, the encryption information is generated at the mobile terminal;

a messaging center configured to provide communications to the mobile terminal via the secure communications channel.

13. The system of claim 12, wherein, the messaging center is coupled to a content server and provides communications received by the content server to the mobile terminal.

14. The system of claim 12, wherein, the encrypted data channel is established by a connectivity function;

wherein, the connectivity function is physically integrated with the messaging center.

15. The system of claim 12, wherein, the encrypted data channel is established by a connectivity function;

wherein, the connectivity function is installed on the host server.

16. A system comprising:

means for, maintaining information concerning a plurality of mobile terminals, the information comprising encryption information and an identifier for each mobile terminal;

means for, receiving a service activation code from an authenticated user of a mobile terminal of the plurality of mobile terminals,

means for, deriving the encryption information from the service activation code;

wherein the service activation code is provided offline to the host server to prevent eavesdropping prior to establishment of a secure communication channel;

wherein the encryption information derived from the service activation code is used in establishing the secure communications channel; and

means for, communicating with the mobile terminal via the secure communication channel;

wherein, the mobile terminal has a permanent terminal identity and a temporary identity.

17. A method for securing communications with a mobile terminal, comprising:

maintaining information concerning a plurality of mobile terminals, the information comprising encryption information for each mobile terminal;

receiving a service activation code from a mobile terminal of the plurality of mobile terminals,

wherein, the mobile terminal has a permanent terminal identity and a temporary identity;

deriving the encryption information from the service activation code;

wherein, the encryption information is generated at the mobile terminal;

establishing a secure communications channel using the service activation code to communicate with the mobile terminal.