# US 10,769,316 B2 · Protecting mobile devices from unauthorized device resets > Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt - Number: US 10,769,316 B2 - Document ID: US10769316B2 - Status: Granted - Kind: B2 - Application number: 15/282,605 - Filed: 2016-09-30 - Published: 2018-04-05 - Granted: 2020-09-08 - Earliest claimed: 2016-09-30 - Assignees: T-Mobile USA, Inc. - Applicants: T-Mobile USA, Inc. - Inventors: Joshua Finger; Kimberly Bylund; Yasmin Karimli - Web page: https://patentgrep.com/patent/US10769316B2 ## CPC - G06F 21/88: Detecting or preventing theft or loss - G06F 21/31: User authentication - G06F 21/44: Program or device authentication - G06F 21/629: {to features or functions of an application} - H04W 4/50: Service provisioning or reconfiguring - H04L 67/34: {involving the movement of software or configuration parameters (network booting or remote initial program loading [RIPL] G06F9/4416)} - G06F: ELECTRIC DIGITAL DATA PROCESSING (computer systems based on specific computational models G06N) - H04W: WIRELESS COMMUNICATION NETWORKS (broadcast communication H04H; communication systems using wireless links for non-selective communication, e.g. wireless extensions H04M1/72) - H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M) ## Abstract Systems and methods are described herein for authorizing master resets (e.g., factory resets) of mobile devices, such as smart phones, tablets, and so on. In some embodiments, the systems and methods employ a server-based authorization schema or mechanism, where at least one step or operation is performed, or caused to be performed, by a server or other system that is remote from the mobile device being reset. ## Claims ### Claim 1 A method for preventing an unauthorized master reset of a mobile device, the method comprising: receiving, at a server remote from the mobile device, a token from the mobile device, wherein the token is transmitted in part from an operating system of the mobile device to the server after invocation of a master reset at the mobile device, and wherein the server is associated with a wireless network carrier that provides a telecommunication network for the mobile device; extracting an identifier for the mobile device from the token; identifying a status of the mobile device by comparing the extracted identifier to information stored within one or more databases associated with the server, wherein the one or more databases store information for subscribers of the wireless network carrier that provides the telecommunication network for the mobile device; wherein the information relates identifiers for mobile devices with status information for the mobile devices, and wherein the status information for the mobile devices indicates whether the mobile devices are stolen; based on the identified status of the mobile device, automatically authorizing the mobile device to perform the master reset without requiring a user authentication; and transmitting to the mobile device an authorization token to the operating system of the mobile device based on the identified status of the mobile device, wherein the authorization token causes the mobile device to complete the master reset at the mobile device when the identified status of the mobile device is an authorized status; and wherein the authorization token causes the mobile device to prevent completion of the master reset operation at the mobile device when the identified status of the mobile device is a stolen status. ### Claim 2 (depends on 1) The method of claim 1, wherein identifying the status of the mobile device by comparing the extracted identifier to the information stored within the one or more databases associated with the server includes determining whether the identifier of the mobile device is included in a database of whitelisted devices or included in a database of blacklisted devices. ### Claim 3 (depends on 1) The method of claim 1, wherein transmitting to the mobile device the authorization token includes transmitting an authorization token that causes the mobile device to request credentials from a user associated with the mobile device before the mobile device completes the master reset at the mobile device. ### Claim 4 (depends on 1) The method of claim 1, wherein extracting the identifier for the mobile device from the token includes extracting an international mobile subscriber identity (IMSI) for the mobile device from the token. ### Claim 5 (depends on 1) The method of claim 1, wherein identifying the status of the mobile device by comparing the extracted identifier to the one or more databases associated with the server includes comparing the extracted identifier to one or more databases associated with the telecommunication network provided by multiple different network carriers. ### Claim 6 (depends on 1) The method of claim 1, further comprising: receiving, prior to receiving the token from the mobile device, information indicating the mobile device has been stolen from a user associated with the mobile device; and storing the identifier for the mobile device in a database of blacklisted devices; wherein identifying the status of the mobile device by comparing the extracted identifier to the one or more databases associated with the server includes determining the status of the mobile device as stolen based on locating the identifier for the mobile device in the database of blacklisted devices. ### Claim 7 A non-transitory computer-readable medium whose contents, when executed by a computing system, cause the computing system to perform a method for authenticating a reset mobile device to a telecommunication network, the method comprising: receiving, at a server remote from a mobile device, a signal transmitted from a reset system of the mobile device, wherein the signal is transmitted from the mobile device to the server after invocation of a master reset at the mobile device, and wherein the server is associated with a network carrier that provides the telecommunication network for the mobile device; obtaining an identifier for the mobile device from the signal; identifying a status of the mobile device by comparing the identifier to information stored within one or more databases associated with the server, wherein the one or more databases store information relating identifiers for mobile devices with status information for the mobile devices that indicates whether the mobile devices are stolen, and wherein the one or more databases store information for subscribers of the network carrier that provides the telecommunication network for the mobile device; based on the identified status of the mobile device, automatically authorizing the mobile device to perform the master reset without requiring a user authentication; and transmitting to the reset system of the mobile device an authorization signal for use in part by an operating system of the mobile device that is based on the identified status of the mobile device, wherein the reset system controls the master reset based on the authorization signal. ### Claim 8 (depends on 7) The non-transitory computer-readable medium of claim 7, wherein identifying the status of the mobile device by comparing the obtained identifier to the one or more databases associated with the server includes determining whether the identifier of the mobile device is included in a database of whitelisted devices or included in a database of blacklisted devices. ### Claim 9 (depends on 7) The non-transitory computer-readable medium of claim 7, wherein transmitting to the mobile device the authorization signal includes transmitting an authorization token to the operating system of the mobile device that causes the mobile device to complete the master reset at the mobile device. ### Claim 10 (depends on 7) The non-transitory computer-readable medium of claim 7, wherein transmitting to the mobile device the authorization signal includes transmitting an authorization token to the operating system of the mobile device that causes the mobile device to request credentials from a user associated with the mobile device before the mobile device completes the master reset at the mobile device. ### Claim 11 (depends on 7) The non-transitory computer-readable medium of claim 7, wherein obtaining the identifier for the mobile device includes extracting an international mobile subscriber identity (IMSI) for the mobile device from a received token. ### Claim 12 (depends on 7) The non-transitory computer-readable medium of claim 7, wherein identifying the status of the mobile device by comparing the obtained identifier to the one or more databases associated with the server includes comparing the obtained identifier to one or more databases associated with the telecommunication network provided by multiple different network carriers. ### Claim 13 (depends on 7) The non-transitory computer-readable medium of claim 7, further comprising: prior to receiving the signal from the mobile device, receiving information indicating the mobile device has been stolen from a user associated with the mobile device; and storing the identifier for the mobile device in a database of blacklisted devices; wherein identifying the status of the mobile device by comparing the identifier to the one or more databases associated with the server includes determining the status of the mobile device as stolen based on locating the identifier for the mobile device in the database of blacklisted devices. ### Claim 14 A mobile device, comprising: a master reset system stored in memory that performs a master reset of the mobile device, the master reset system including: a token module that transmits a reset token to a remote server in response to an initiation of the master reset of the mobile device, wherein the remote server is part of a telecommunication network providing telecommunication services to the mobile device, and the token module that receives from the remote server an authorization token for the master reset of the mobile device based on the information stored in one or more databases of the telecommunication network; and an authentication module that completes the master reset of the mobile device after receiving the authorization token from the remote server, without providing a user authentication to the remote server. ### Claim 15 (depends on 14) The mobile device of claim 14, wherein the token module transmits the reset token to the remote server that includes an identifier for the mobile device. ### Claim 16 (depends on 14) The mobile device of claim 14, wherein an operating system of the mobile device transmits the reset token to the remote server. ### Claim 17 (depends on 14) The mobile device of claim 14, wherein the authentication module causes the mobile device to request credentials from a user associated with the mobile device before completing the master reset of the mobile device when the authorization token indicates that an identifier for the mobile device is located within a blacklist of stolen devices. ### Claim 18 (depends on 14) The mobile device of claim 14, wherein the authentication module completes the master reset of the mobile device when the authorization token indicates that an identifier for the mobile device is not located within a blacklist of stolen devices. ### Claim 19 (depends on 14) The mobile device of claim 14, wherein the authentication module completes the master reset of the mobile device when the authorization token indicates that an identifier for the mobile device is located within a whitelist of authenticated devices.