KR20090038916A - System and method for sharing credentials stored in a credentials module of a first device - Google Patents

Abstract

A primary appliance, reversibly engageable with a secondary appliance for sharing credentials, including: a credentials module configured to enable the primary appliance to make/receive phone calls; and an interface with the secondary appliance, the interface including: a physical interface for physically reversibly engaging the primary appliance and the secondary appliance; and a conductive interface for enabling the secondary appliance to communicate with the module upon being physically engaged. A secondary appliance, reversibly engageable with a primary appliance having a credentials module enabling the primary appliance to make/receive phone calls, including: a service module configured to be enabled by the credentials module; and an interface, for the primary appliance, including: an interface for physically reversibly engaging the secondary appliance with the primary appliance; and a conductive interface for enabling communication of the secondary appliance with the credentials module upon the secondary appliance being physically engaged with the primary appliance.

Description

A system and method for sharing a certificate stored in a credential module of a first device {SYSTEM AND METHOD FOR SHARING CREDENTIALS STORED IN A CREDENTIALS MODULE OF A FIRST DEVICE}

The present invention relates to a system for sharing a user's credentials in a mobile phone, in particular a mobile phone using a subscriber identity module (SIM).

Mobile phones are the ubiquitous part of society. Mobile phones are generally owned by a user who receives and originates calls paid by the user. Recently, a number of additional services have been added to mobile phones. Such services include additional communication options (eg, text messaging, Internet access, broadcast reception, and connection with a computer).

Other services use communication channels to access and transact remote service providers (eg, banks, merchants, and content providers that provide music, video, ring tones, and news). There are also services specific to the handset unit (such as music listening, video listening, game playing, and contact and calendar schedule management). Some services use short range communication (e.g. infrared, Bluetooth, or Near Field Communication) for payment.

Many of these services acquired and consumed by mobile phones require subscription and identification of users and / or user rights. The SIM card is an exemplary standard module for managing data used to determine the identity and authority of a user. Usually the SIM card carries data associated with other users (eg contact and calendar databases, and downloaded content). Thus, the SIM card converts a general purpose electronic device into a personalized device by managing user credentials (ie, data identifying the user and / or user rights) and / or content owned and stored on the SIM card.

1 is a simplified schematic block diagram of a typical mobile electronic device according to the prior art. Mobile electronic device 100 (eg, smart mobile phone) is shown in FIG. 1. Certificate module 110 (e.g., a SIM card) is a module that identifies a user, his payment account, and optionally other access rights the user has. The credential module 110 may also store other personal data (eg, contacts, calendars, Internet favorites, text messages sent / received, and content owned by the user). The credential module 110 interfaces with the electronic device service 140 through the electronic device interface 120 and the module interface 130. Electronic device service 140 represents a service module that includes hardware and software components of electronic device 100 that provide voice and non-voice service. The electronics interface 120 and the module interface 130 are generally conventional electrical contacts for operatively connecting to the electronics service 140, which requires the appropriate user certificate for the certificate module 110.

Usually the mobile electronics can be connected to another device to extend the functionality of the electronics. For example, a mobile phone may include a car adapter that provides safe driving through hand-free communication; Desk cradle to provide better sound quality and a more convenient handset; Personal computers for synchronizing contacts, calendars, and files; Or a Bluetooth headset for handfree mobile communication.

2 is a simplified schematic block diagram of a typical mobile electronic device connected to an accessory according to the prior art. Mobile electronic device 100 ′ includes an accessory interface 150 for operatively connecting to accessory 160 via an electronic device interface 162. Accessory 160 provides an enhanced or additional service indicated by accessory service 164. Accessory interface 150 and electronics interface 162 are logical, electrical, and / or physical interfaces (eg, socket-acceptable connections, operatively connecting electronics 100 'to accessory 160, Cradle, and Bluetooth link). Current accessories are limited to utilizing SIM-related services available to electronic devices, including SIM cards, which are limited by the features and capabilities of the electronic devices.

The user of the mobile electronic device can usually move the SIM card from one electronic device to another, thereby personalizing and activating the second electronic device while depersonalizing and deactivating the first electronic device. 3A is a simplified schematic block diagram of two typical mobile electronic devices according to the prior art. A first electronic device 100A and a second electronic device 100B providing similar or different electronics services 140A and 140B are shown in FIG. 3A. The module transfer operation (A) allows a user to selectively insert the certificate module 110 into either the first electronic device 100A or the second electronic device 100B, thereby personalizing and activating the current electronic device. On the other hand, it is a manual procedure to deactivate other electronic devices. Moving the certificate module 110 from the first electronic device 100A to the second electronic device 100B via the module transfer operation A is considered an inconvenient task.

Prior art systems, such as taught by US Pat. No. 6,868,282 (hereinafter referred to as Carlsson '282) of Carlsson, which is hereby incorporated by reference in its entirety, may be used by a user from a SIM card in which the first electronic device resides in the electronic device. A method of reading a certificate and transmitting the user certificate to a second electronic device where the user certificate is used for mobile service acquisition is taught. 3B is a simplified schematic block diagram of two typical mobile electronic devices adjusted from FIG. 3 of Carlsson '282.

3B shows how two mobile electronic devices (i.e., MS (A) and MS (B)) communicate with each other to access any SIM card (i.e., SIM card (A) and SIM card (B)). . The method taught by Carlsson '282 describes the main CPU of the MS (A) and / or MS (B) (the CPU / MEM) and is limited by the need for both electronics to operate to allow one electronic device to use the user certificate of another electronic device.

A user carrying the first electronic device housing the certificate module can operate the second electronic device by coupling the certificate module of the first electronic device to the second electronic device without having to remove the certificate from the first electronic device. desirable.

It is an object of the present invention to provide a system for sharing user credentials in a mobile phone, in particular a mobile phone using a SIM card.

For the sake of simplicity, the term "electronic device" is defined to be used in the text, especially to refer to a device serving a user, and is owned by the user or another individual. Thus, for example, the first electronic device may be a cellular handset owned by the user while the second electronic device may be a car phone owned by the user or a public telephone accessible to the user, for example.

A preferred embodiment of the present invention provides a certificate module that physically engages a first electronic device with a second electronic device and optionally resides in the first electronic device without the need to physically remove the certificate module from the first electronic device. To provide a system for operatively connecting the second electronic device.

Accordingly, according to the present invention, there is provided an apparatus comprising: (a) a first electronic device having a certificate module, the first electronic device operative to send and receive telephone calls using the certificate module; (b) (iii) physically engage the first electronic device, thereby establishing an interface with the certificate module; And (ii) provide a service when utilizing the credential module via an interface; A system for sharing a certificate including at least one second electronic device to be set is provided.

Preferably, the interface is electrically conductive.

Preferably, the interface is a short range contactless interface.

More preferably, the short range contactless interface utilizes at least one communication technology selected from the group consisting of ISO 14443 technology, NFC technology, Bluetooth technology, infrared technology, and acoustic interface technology.

Advantageously, the service comprises: enabling of a telephone call; Sending text messages; Providing user identity; Providing the identity of the subscription record in the operator's database, providing data to allow the user to access the credit account, providing data to allow the user to access the bank account, providing access to the electronic wallet, providing access to the user's contact database Providing access to the user's calendar database, providing access to user-owned content, providing access to ring tones, providing access to music, providing access to video, and providing DRM access codes; It includes at least one service selected from the group.

According to the invention there is provided a first electronic device capable of first interlocking with a second electronic device for sharing a certificate, comprising: (a) a certificate module configured to allow the first electronic device to send and receive telephone calls; And (b) (iii) a physical interface for physically inversely engaging the first electronic device with the second electronic device; And (ii) an interface with the second electronic device having a conductive electrical interface operable to communicate with the certificate module when the second electronic device is physically engaged. A first electronic device is provided that can engage back with the electronic device.

According to the invention, a second electronic device for sharing a certificate, which is first interlocked with a first electronic device having a certificate module which enables the first electronic device to send and receive telephone calls, comprising: (a) A service module configured to be enabled by the credential module; And (b) (iii) a physical interface to physically reversely engage the second electronic device with the first electronic device; And (ii) a conductive electrical interface operative to allow the second electronic device to communicate with the certificate module when the second electronic device is physically engaged with the first electronic device. There is provided a second electronic device comprising a.

Preferably, the service module is configured to enable telephone calls, send text messages, provide user identity, provide a subscription record in an operator's database, provide data to allow a user to access a credit account, Providing data that allows access to a bank account, providing access to an electronic wallet, providing access to a user's contact database, providing access to a user's calendar database, providing access to user-owned content, providing access to ringtones, At least one service selected from the group consisting of providing access to music, providing access to video, and providing DRM access.

These and further embodiments will be apparent from the following detailed description and examples.

The invention is described in the text only by way of example with reference to the accompanying drawings.

1 is a simplified schematic block diagram of a typical mobile electronic device according to the prior art.

2 is a simplified schematic block diagram of a typical mobile electronic device connected to an accessory according to the prior art.

3A is a simplified schematic block diagram of two typical mobile electronic devices according to the prior art.

3B is a simplified schematic block diagram of two typical mobile electronic devices adjusted in FIG. 3 of Carlsson '282.

4 is a simplified schematic block diagram of two typical mobile electronic devices in accordance with a preferred embodiment of the present invention.

5A is a simplified schematic block diagram of an exemplary alternative for implementing the connections B and C of FIG. 4 in accordance with a preferred embodiment of the present invention.

5B is a simplified schematic block diagram of an exemplary alternative for implementing the connections B and C of FIG. 4 according to another preferred embodiment of the present invention.

5C is a simplified schematic block diagram of an exemplary alternative to the embodiment of FIG. 5B in accordance with a preferred embodiment of the present invention.

5D is a simplified schematic block diagram of an exemplary alternative to the embodiment of FIG. 5C in accordance with a preferred embodiment of the present invention.

6 is a simplified flowchart of the operation of a certificate-sharing system according to a preferred embodiment of the present invention.

The present invention relates to a system for sharing a user's certificate in a mobile phone, in particular a mobile phone using a SIM card. According to the present invention, the principle and operation of sharing a user certificate in a mobile phone can be better understood with reference to the accompanying description and the drawings.

4 is a simplified schematic block diagram of two mobile electronic devices according to a preferred embodiment of the present invention. The first electronic device 200A (eg, a mobile phone) is physically engaged with the second electronic device 200B. The expression "physically engaged" in the text indicates that the body of the first electronic device 200A is inserted into or mechanically connected to the body of the second electronic device 200B in the text, so that the first electronic device 200A and It is used to mean that the second electronic device 200B temporarily functions as a single integrated unit. For example, the first electronic device 200A may be inserted into a slot of the second electronic device 200B or a cradle which forms or is connected to a part of the second electronic device 200B.

The user certificate stored in the credential module 210 may include, for example, user-specific data (eg, user identity, such as the identity of a subscription record in an operator's database); Data that allows a user to access a credit or bank account; "Electronic wallet"; A user's contact and calendar database; User-owned content (eg, downloaded ringtones, music, videos); And code necessary to access digitally protected content under a digital rights management (DRM) design.

The certificate module 210 is preferably a security chip (for example, a SIM card) that protects the content through a physical structure and digital encryption that can prevent tampering, and the certificate module 210 controls the electronic device 200A. It uses a conventionally known technique which can operate. Operation of electronic device 200A is enabled by providing identity, code, and operating parameters. The credential module 210 includes a microprocessor that executes cryptographic operations (eg, cryptographic design, challenge-response routines, digital signatures, and cryptographic-generated procedures).

The certificate module 210 is operatively connected to the electronic device service 240A through the electronic device interface 220 and the module interface 230A. The electronics interface 220 and the module interface 230A include the mechanical, electrical, and logical connections as described above. The electronics interface 220 and the module interface 230A may be based on card and reader interfaces, respectively, defined for example under the ISO 7816 standard. First electronic device 200A includes hardware and software that provides electronic device service 240A (eg, a service module that enables voice calls, text messaging, storage, and multimedia). At least some of the electronics service 240A requires access to and use of user credentials in the credential module 210.

In a similar manner, the second electronic device 200B includes a certificate module 210 ', an electronic device interface 220', a module interface 230B, and an electronic device service 240B. Electronic service 240B may be similar to and / or different from electronic service 240A. For example, the second electronic device 200B may be a high power hand-free car phone integrated in a digital radio receiver for subscription-based broadcasting. In this example, electronic device 240B includes hardware and software for both mobile phone voice calls and digital wireless reception, all of which require certificate module 210 'for operation.

According to a preferred embodiment of the present invention, the first electronic device 200A enables the electronic device service 240B to utilize the user certificate module 210 of the first electronic device 200A. Physically engage 200B. The physical engagement can be made by direct connection of the module interface 230B to the electronic device interface 220 or the module interface 230A via the connection C via the connection (B). This will be described in more detail below with respect to FIGS. 5A-5D. Thus, when the first electronic device 200A is physically engaged with the second electronic device 200B, the second electronic device 200B utilizes the certificate module 210 of the first electronic device 200A for operation. do.

In contrast to the prior art of FIG. 3A, the first electronic device 200A is preferably turned off (ie, not operated) when the second electronic device 200B utilizes the certificate module 210. Therefore, the connection between the second electronic device 200B and the certificate module 210 is made, and the connection between the second electronic device 200B and the first electronic device 200A is not connected.

The operation mode described above with respect to the second electronic device 200B utilizing the first electronic device 200A and the user certificate from the certificate module 210 of the first electronic device 200A is a general operation mode of the prior art. (I.e., module transfer operation A of Fig. 3A) need not be excluded. In this conventional mode of operation, instead of attaching the first electronic device 200A to the second electronic device 200B, the certificate module 210 'is removed from the first electronic device 200A and the second electronic device ( 200B).

5A is a simplified schematic block diagram of an exemplary alternative for implementing the connections B, C of FIG. 4 in accordance with a preferred embodiment of the present invention. In FIG. 5A, certificate module 210 'includes a chip / body 210C sandwiched between upper contact surface 220C and lower contact surface 220C'. This configuration allows the certificate module 210 'to be accessed through the connection C to the module interface 230A for operation of the first electronic device 200A as shown in FIG. 4 or to the second electronic device 200B. Access to the module interface 230B through the connection (B) for the operation of. The body of the first electronic device 200A and the second electronic device 200B is formed between the contact surface 220C 'and the module interface 230B when the first electronic device 200A is engaged with the second electronic device 200B. Is set to allow physical contact.

5B is a simplified schematic block diagram of an exemplary alternative for implementing the connections B, C of FIG. 4 according to another preferred embodiment of the present invention. In FIG. 5B, certificate module 210 ″ has only a single contact surface 220C ″ for chip / body 210C. The contact surface 220C ″ is physically connected to the first module interface 230A 'which enables access of the certificate module 210 "with the electronics service 240A. The first module interface 230A 'is electrically connected to the second module interface 230A ", which means that the certificate module 210" contacts the contact surface 220C "when physically engaged with the first electronic device 200A'. ), A first module interface 230A ', a second module interface 230A ", and a module interface of the second electronic device 200B allowing access by the electronics service 240B via the module interface 230B. Interfacing with 230B.

5C is a simplified schematic block diagram of an exemplary alternative to the embodiment of FIG. 5B in accordance with a preferred embodiment of the present invention. In FIG. 5C, the dual side module interface 230A ″ may use the certificate module 210 ″ of the first electronic device 200A ″ (via contacts with the module interface 230B) to serve the electronics service 240A and the electronic device. Connect to service 240B.

5D is a simplified schematic block diagram of an exemplary alternative to the embodiment of FIG. 5C in accordance with a preferred embodiment of the present invention. In FIG. 5D, the module interfaces 230A "', 230B"' show a contactless communication mechanism when connecting the certificate module 210 "'of the first electronic device 200A"' to the second electronic device 200B "'. The amount of data generally exchanged between the certificate module 210 "and the second electronic device 200B" is very small, and both the first electronic device 200A "'and the second electronic device 200B"'. Is automatically powered by an independent power source, the contactless communication mechanism can utilize wireless communication techniques known in the art (eg, ISO 14443, NFC, Bluetooth, Infrared, and Acoustic Interface).

6 is a simplified flowchart of the operation of a certificate-sharing system according to a preferred embodiment of the present invention. The components (and reference numbers) of FIG. 4 are included in this description for clarity. The first electronic device 200A housing the certificate module 210 is utilized to access the user certificate required for operation (step 400). Operation of the first electronic device 200A then ends (step 410). The first electronic device 200A is then physically engaged with the second electronic device 200B (for example, by inserting the first electronic device 200A into a slot or cradle of the second electronic device 200B) ( Step 420).

The physical connection (step 420) of the first electronic device 200A with the second electronic device 200B, as in the embodiment of FIG. 5A, allows direct contact between the certificate module 210 and the second electronic device 200B. Build (step 430). Alternatively, the physical connection (step 420) of the first electronic device 200A with the second electronic device 200B may be a module interface of the first electronic device 200A, as in the embodiment of FIGS. 5B-5D. Through 230A, establish an indirect contact between the certificate module 210 and the second electronic device 200B (step 440). Both steps 430 and 440 are performed by the second electronic device 200B residing in the certificate module 210 (first electronic device 200A) to receive a user certificate necessary for the operation of the second electronic device 200B. (Step 460).

The communication between the second electronic device 200B and the certificate module 210 is preferably made using a standard electronic device / certificate module protocol, and preferably any part that forms part of the first electronic device 200A. Note that this is done without linkage or mediation by a processor or communication function. The user certificate accessed by the first electronic device 200A from the credential module 210 in step 400 is accessed by the second electronic device 200B from the credential module 210 in step 460. It will be appreciated that the user certificate is the same or different. In both cases (ie, steps 400 and 460), this user certificate responds to a particular action selected by the user (eg, a telephone call, listening to digital radio broadcasts, and initiating an electronic bank transaction). ).

The first electronic device 200A housing the certificate module 210 is generally a mobile electronic device (preferably a mobile phone), while the second electronic device 200B is a mobile or fixed device (e.g., It should be emphasized that other mobile phones, car phone handsets, desk accessories, and personal computers) may be used. The second electronic device 200B includes an independent certificate module (ie, a certificate module 210 ') and / or a certificate module of the first electronic device 200A after removal from the first electronic device 200A. It should also be emphasized that it can be set to accommodate 210.

Although the present invention has been described with respect to a limited number of embodiments, it will be understood that many variations, modulations, and other applications of the invention may be made.

Claims (13)

In a system that shares a certificate, (a) a first electronic device having a certificate module, said first electronic device operable to make and receive telephone calls utilizing said certificate module; And (b) (iii) physically engage the first electronic device, thereby establishing an interface with the certificate module, and (Ii) to provide a service when utilizing the credentials module via the interface, At least one second electronic device configured; System for sharing a certificate, characterized in that it comprises a. The method of claim 1, And the interface is electrically conductive. The method of claim 1, And the interface is a short range contactless interface. The method of claim 3, wherein The short range contactless interface comprises: at least one communication technology selected from the group consisting of ISO 14443 technology, NFC technology, Bluetooth technology, infrared technology, and acoustic interface technology. The method of claim 1, The service may include enabling telephone calls; Sending text messages; Providing user identity; Providing the identity of the subscription record in the operator's database, providing data to allow the user to access the credit account, providing data to allow the user to access the bank account, providing access to the electronic wallet, providing access to the user's contact database Providing access to the user's calendar database, providing access to user-owned content, providing access to ring tones, providing access to music, providing access to video, and providing DRM access codes; And at least one service selected from the group. A first electronic device capable of reverse engagement with a second electronic device for sharing a certificate, (a) a certificate module configured to enable the first electronic device to send and receive telephone calls; And (b) (iii) a physical interface for physically inversely engaging the first electronic device with the second electronic device; And (Ii) a conductive electrical interface operative to enable the second electronic device to communicate with the certificate module when physically engaged; An interface with the second electronic device having a; first electronic device comprising a. A second electronic device reversible interlocking with the first electronic device having a certificate module for enabling the first electronic device to send and receive telephone calls for sharing a certificate, the method comprising: (a) a service module configured to be enabled by the credential module; And (b) (iii) a physical interface to physically reversely engage the second electronic device with the first electronic device; And (Ii) a conductive electrical interface operable to communicate with the certificate module when the second electronic device is physically engaged with the first electronic device, The second electronic device comprising a; interface for the first electronic device having a. The method of claim 7, wherein The service module may include enabling telephone calls, sending text messages, providing user identity, providing a subscription record in the operator's database, providing data allowing the user to access a credit account, and allowing the user to access a bank account. Provide data that allows it to be provided, provide access to the electronic wallet, provide access to the user's contact database, provide access to the user's calendar database, provide access to user-owned content, provide access to ringtones, access to music And at least one service selected from the group consisting of providing, providing access to video, and providing a DRM access code. A method of sharing a certificate between a first electronic device having a certificate module and a second electronic device, (a) selectively operating said first electronic device to communicate with said certificate module, thereby enabling to perform telephone call transmission and reception; (b) interfacing the second electronic device with the certificate module to physically engage the first electronic device with the second electronic device, thereby enabling service of the second electronic device; Method comprising a. The method of claim 9, Said interfacing comprises engaging an electrical contact point. The method of claim 9, Said interfacing comprises using a short range contactless interface. The method of claim 11, The short range contactless interface comprises: at least one communication technology selected from the group consisting of ISO 14443 technology, NFC technology, Bluetooth technology, infrared technology, and acoustic interface technology. The method of claim 9, The service may include enabling telephone calls; Sending text messages; Providing user identity; Providing the identity of the subscription record in the operator's database, providing data to allow the user to access the credit account, providing data to allow the user to access the bank account, providing access to the electronic wallet, providing access to the user's contact database Provide access to the user's calendar database, provide access to user-owned content, provide access to ring tones, provide access to music, provide access to video, and provide DRM access codes; At least one service selected from the configured group.

Images