System and method for improved security in handset reprovisioning and reprogramming
AssigneeKyocera Wireless Corp.
InventorGowri Rajaram
Life of this patent
Estimating the term…
Abstract
Systems and methods for improved security in handset reprogramming are provided that prevent a handset from being reprogrammed in the field without authorization from carrier. When a handset receives a reprogramming request, or detects a reprogramming attempt, the handset contacts the carrier for authorization to be reprogrammed. The network can provide the authorization, deny the authorization, require additional information from the reprogramming device, or contact the reprogramming device directly to authorize the reprogramming. Additionally, the carrier may provide the handset and the reprogramming device each with a private key that can be converted by each device and then compared by the handset to determine if the reprogramming device is authorized.
Claims19
A method for improved security in reprogramming wireless communication devices, the method comprising the steps of:
- receiving a reprogramming authorization request from a reprogrammable wireless communication device in communication with a reprogramming device, the reprogramming authorization request including contact information for the reprogramming device and requesting authorization to be reprogrammed by the reprogramming device and having a unique identifier for the requesting reprogrammable wireless communication device and further where the reprogramming authorization request is generated by the reprogrammable wireless communication device;
- consulting a data storage area for reprogramming information pertaining to the reprogrammable wireless communication device;
- determining the current programming status of the reprogrammable wireless communication device;
- sending a reprogramming authorization response, the reprogramming authorization response based on a calculation, to the reprogrammable wireless communication device based on the current programming status;
- sending a private key to the reprogrammable wireless communication device;
- and
- sending the private key to the reprogramming device, wherein the private keys are converted by the respective devices and compared to determine the reprogramming authorization response.
A computer readable medium having stored thereon one or more sequences of instructions for causing one or more microprocessors to perform the steps for improved security in reprogramming wireless communication devices, the steps comprising:
- receiving a reprogramming authorization request from a reprogrammable wireless communication device, the reprogramming authorization request including contact information for the reprogramming device and requesting authorization to be reprogrammed by the reprogramming device and having a unique identifier for the requesting reprogrammable wireless communication device and further where the reprogramming authorization request is generated by the reprogrammable wireless communication device;
- consulting a data storage area for reprogramming information pertaining to the reprogrammable wireless communication device;
- determining the current programming status of the reprogrammable wireless communication device;
- sending a reprogramming authorization response to the reprogrammable wireless communication device based on the current programming status and where the reprogramming authorization response is based on a calculations;
- sending a private key to the reprogrammable wireless communication device;
- and
- sending the private key to the reprogramming device, wherein the private keys are converted by the respective devices and compared to determine the reprogramming authorization response.
A system for improved security in reprogramming wireless communication devices, the system comprising:
- a reprogrammable wireless communication device having a serial interface adaptable for communication with a reprogramming device;
- and
- a security server communicatively coupled with the reprogrammable wireless communication device over a wireless communication network;
- and
- a data storage area coupled with the security server, the data storage area configured to store information related to the reprogramming of reprogrammable wireless communication devices, the reprogrammable wireless communication device further comprising an access flap modifiable by the security server, wherein the access flap is set for one of the following:
- to allow the handset to authorize reprogramming,
- to require the security server to authorize handset reprogramming, and
- to allow reprogramming without authorization,
- wherein the reprogrammable wireless communication device in response to a communication from the reprogramming device, contacts the security server for authorization to be reprogrammed by the reprogramming device, the reprogramming authorization request generated by the reprogrammable wireless communication device and the reprogramming authorization based on a calculation.
A method for providing variable reprogramming access to a reprogrammable wireless communication device, the method comprising the steps of:
- compiling a remote opcode set comprising at least one remote opcode and a data payload;
- and
- sending the remote opcode set to a plurality of handsets, wherein processing of the remote opcode set causes each handset to modify its level of reprogramming security wherein the modification comprises turning off reprogramming security for a discrete time interval.
A method for improved security in reprogramming wireless communication devices, the method comprising the steps of:
- receiving an authorization request generated by a reprogrammable wireless communication device in communication with a reprogramming device, the authorization request comprising contact information for the reprogramming device, requesting authorization to be reprogrammed by the reprogramming device and having a unique identifier for the requesting reprogrammable wireless communication device;
- consulting a data storage area for reprogramming information pertaining to the reprogrammable wireless communication device, the reprogramming information comprising the current programming status of the reprogrammable wireless communication device;
- sending a reprogramming authorization response to the reprogrammable wireless communication device based on the current programming status, wherein the reprogramming authorization response comprises a security key;
- sending the security key to the reprogramming device, wherein the security keys are processed by the respective devices and compared to determine that reprogramming is authorized;
- storing the authorization request and the authorization response in the data storage area;
- and
- associating the authorization request and the authorization response with the requesting reprogrammable wireless communication device.
A method for improved security in reprogramming wireless communication devices, the method comprising the steps of:
- receiving an authorization request generated by a reprogrammable wireless communication device in communication with a reprogramming device, the authorization request comprising contact information for the reprogramming device, requesting authorization to be reprogrammed by the reprogramming device and having a unique identifier for the requesting reprogrammable wireless communication device;
- consulting a data storage area for reprogramming information pertaining to the reprogrammable wireless communication device, the reprogramming information comprising the current programming status of the reprogrammable wireless communication device;
- sending a reprogramming authorization response to the reprogrammable wireless communication device based on the current programming status, wherein the reprogramming authorization response comprises a security key;
- sending the security key to the reprogramming device, wherein the security keys are processed by the respective devices and compared to determine that partial reprogramming is authorized;
- storing the authorization request and the authorization response in the data storage area;
- and
- associating the authorization request and the authorization response with the requesting reprogrammable wireless communication device.
A method for improved security in reprogramming wireless communication devices, the method comprising the steps of:
- receiving an authorization request generated by a reprogrammable wireless communication device in communication with a reprogramming device, the authorization request comprising contact information for the reprogramming device, requesting authorization to be reprogrammed by the reprogramming device and having a unique identifier for the requesting reprogrammable wireless communication device;
- consulting a data storage area for reprogramming information pertaining to the reprogrammable wireless communication device, the reprogramming information comprising the current programming status of the reprogrammable wireless communication device;
- sending a reprogramming authorization response to the reprogrammable wireless communication device based on the current programming status, wherein the reprogramming authorization response comprises a security key;
- sending the security key to the reprogramming device, wherein the security keys are processed by the respective devices and compared to determine that reprogramming is denied;
- storing the authorization request and the authorization response in the data storage area;
- and
- associating the authorization request and the authorization response with the requesting reprogrammable wireless communication device.
Dependencies are inferred from the claim text.