TW200818840A - System and method for sharing credentials - Google Patents

Abstract

A primary appliance, reversibly engageable with a secondary appliance for sharing credentials, including: a credentials module configured to enable the primary appliance to make/receive phone calls; and an interface with the secondary appliance, the interface including: a physical interface for physically reversibly engaging the primary appliance and the secondary appliance; and a conductive interface for enabling the secondary appliance to communicate with the module upon being physically engaged. A secondary appliance, reversibly engageable with a primary appliance having a credentials module enabling the primary appliance to make/receive phone calls, including: a service module configured to be enabled by the credentials module; and an interface, for the primary appliance, including: an interface for physically reversibly engaging the secondary appliance with the primary appliance; and a conductive interface for enabling communication of the secondary appliance with the credentials module upon the secondary appliance being physically engaged with the primary appliance.

Description

200818840 IX. Description of the Invention: [Technical Field of the Invention] The present invention relates to a system for sharing a maker's voucher in a mobile phone, in detail, in a mobile phone of a (4) SIM (User Identification, Part Code Module) card. [Prior Art] Acting on the phone has become a ubiquitous part of society. Mobile phones are typically owned by the user who made the call and receives the call (the user pays for the call). In recent years, many additional services have been added to mobile phones. Services such as # & include additional communication options (for example, messaging, internet access, broadcast reception, and computer connectivity). Other services use communication channels to access and service remote service providers (e.g., banks, merchants, and content providers that provide, for example, music, video, ring tones, and news). There are also services that are limited to mobile phones (such as 'listening to music, watching videos, playing games, and managing contacts and scheduling schedules. - Some services use short-range communication (for example, infrared, Bluetooth (BlUet00th) or NFC (Near Field Communication)) for payment. Many of the services that are acquired or consumed by mobile phones require the subscription and identification of users and/or user rights. The card reader is an exemplary standard module that maintains information for determining the user's identification number and rights. The card is usually also accompanied by other user-related information (for example, the contact and schedule database and downloaded content). Therefore, Xieca converts the universal device into a personalization by maintaining the user's credentials (ie, identifying the user's and/or user's rights) and/or the content owned by the user and being stored in the card. Let 123733.doc 200818840 Figure 1 is a simplified schematic block diagram of an exemplary mobile device in accordance with the prior art. Mobile device 100 (eg, a smart mobile phone) is shown in FIG. The credential module 110 (e.g., SIM card) is a module that identifies the user, its billing account, and other access rights that the user may have as appropriate. The credential module 110 can also store other personal data (e.g., contact list, schedule, internet preferences, text messages sent/received, and content owned by the user). The credential module 110 is loaded and loaded via the device interface 12 and the module interface 13

Set up the service 140 interface connection. The device service 14 〇 represents a service module including hardware components and software components of the device 1 for providing voice and non-voice services. Device interface 120 and module interface 13A are typically conventional electrical contacts for operatively connecting device service 140 to credential module 110 (which requires appropriate user credentials). The binding device can typically be connected to another device to extend the functionality of the device. For example, 'mobile phones can be connected to:, car adapters to provide safe driving through hands-free communication; desk ^die, to provide better sound quality and more convenient headphones Personal computer for synchronizing contacts, schedules, and files; or Bluetooth headsets for hands-free communication. Figure 2 is a schematic block diagram of a typical mobile device connected to an accessory in accordance with the prior art. The mobile device 1A includes an accessory interface (9) for positively connecting to the accessory (10) via the device interface M2. Attachment (10) provides an improved or additional service represented by Service 164. Accessory interface 150 The device interface 162 is a device, a serial, an electrical and/or a physical interface (eg, a logical socket-socket connection operatively connected to the accessory 160, an earpiece holder, and a blue 123739.doc 200818840 bud link) . Current attachments are limited to the use of SIM related services that are available for devices containing SIM cards, which may be limited by the features or performance of the device. The user of the mobile device can typically move the SIM card from one device to another, thereby personalizing and activating the second device while personalizing and deactivating the first device. Figure 3A is a simplified schematic block diagram of two exemplary mobile devices in accordance with the prior art. A first device 100A and a second device 100B that provide similar or different device services 140A and device services 140B are shown in Figure 3A. The module transfer operation A is a manual program that allows the user to selectively insert the credential module 11 into the first device 100A or the second device 100B, thereby selectively personalizing and starting the current device while deactivating another a device. Moving the credential module 110 from the first device 100A to the second device 100B via the module transfer operation A is considered an inconvenient task. A prior art system taught by Carlsson in U.S. Patent No. 6,868,282 (hereinafter referred to as Carlsson '282), which is hereby incorporated by reference herein in its entirety herein in its entirety herein in The SIM card reads the user credentials and transmits the user credentials to the second device (where the user credentials are used to obtain the mobile service). Figure 3B is a simplified schematic block diagram of two exemplary mobile devices adapted from Figure 3 of Carlsson '282. Figure 3B shows how two mobile devices (i.e., MS A and MS B) communicate with each other to access any SIM card (i.e., SIM card A and SIM card B). The method taught by Carlsson! 282 is subject to the following restrictions: The primary CPU of MS A and/or MS B (CPU/MEM of Figure 3B) requires mediation to process the user credentials stored in SIM card A and/or SIM card B. Secure exchange; and it is necessary to have 123739.doc 200818840 both devices operable to allow one device to use the user credentials of another device.使用者 使 使 禹 带有 带有 容纳 容纳 容纳 容纳 容纳 容纳 容纳 容纳 容纳 容纳 容纳 容纳 容纳 容纳 容纳 容纳 容纳 容纳 容纳 容纳 容纳 容纳 容纳 容纳 容纳 容纳 容纳 容纳 容纳 容纳 容纳 容纳 容纳 容纳 容纳 容纳 容纳 容纳 容纳The group is coupled to the second device to operate the second device. SUMMARY OF THE INVENTION The object of the present invention is to provide a mine in action,

Oysters call, in particular, a system for sharing user credentials in a mobile phone using a SIM card. For the purposes of clarity, the term "device" as specifically defined for use herein refers to a device that is serviced by a user or owned by another user. The :: device can be, for example, a cellular phone owned by the user, and the second device can be, for example, a car battery owned by the user, or a public phone that the user can use. The preferred embodiment of the present invention seeks to provide for the first device to be responsive to the second device, and then to operatively connect the second device to the voucher module resident in the first device without The system that removes the credential module from the first-installed entity. Thus, in accordance with the present invention, a system for sharing credentials is provided for the first time. The system includes a primary device that includes a credential module operable to generate and receive a phone call using a credential module. And (8) at least the secondary device' is configured to: (1) yell with the primary device entity to establish an interface with the credential module; and (9) provide services via the authentication module. Preferably, the interface is electrically conductive. 123739.doc 200818840 Preferably the interface is a short range contactless interface. Most preferably, the short range contactless interface utilizes at least one communication technique selected from the group consisting of: 14443 technology, NFC technology, Bluetooth technology, infrared technology, and acoustic interface technology. In the best of the best, the service includes at least one service selected from the group consisting of: assigning a stomach call, transmitting a message, providing a user identification code, and providing identification of the reservation record in the operator's database. Code, provide

The user accesses the secret account n to provide the user with access to the bank account information, to provide access to the electronic wallet, to provide access to the user ^ database; to provide the calendar of the money to the library Access, provide access to content owned by the user, provide access to the vocal sound, provide access to music, provide access to video, and provide D-tank access codes. According to the present invention, for the first time, the main device for reciprocally meshing with the secondary device to share the voucher is provided, and the main device includes: (a) the voucher module, which is configured. To enable the main 奘¥# 4 (4) The king device generates and receives a telephone call; and an interface with the secondary device, the interface includes a • Fen Shiper "w匕祜·(1)-entity interface, which is used for The main device and the secondary device are physically reversibly sprayed; and (8) a conductive interface is operable to energize the secondary device to communicate with the module in the event of a physical connection. According to the present invention, a secondary device is provided for the first time, which is used for reversible engagement with a main device, and the primary device has an enabling device to generate and receive a call, and a certificate is provided. a module, the secondary device comprising: (4) a service module configured to be authenticated by the credential module 123739.doc -10- 200818840; and (b) - an interface for the primary device, the interface comprising (i) - a two-sided body for physically reversibly merging the secondary device with the primary and (8)-conducting electrical interface operable to energize the secondary device in engagement with the primary device entity In case of communication with the credential module.

Preferably, the 'service module includes at least one service selected from the group consisting of: enabling-telephone calling, transmitting a text message, providing a user-specific code, providing a record of the reservation record in the operator's database. Providing access to the letter (4) of the user; providing information to allow the accessor to access the bank account, providing access to the electronic wallet, providing access to the user's contact database; providing the user The calendar database accesses, provides access to the (4) owner, provides access to the voice of the age, provides access to music, provides access to the video, and provides D-ary access codes. These and other embodiments will be apparent from the following embodiments and examples. [Embodiment] The present invention relates to a system for slashing user credentials in a mobile phone using a mobile phone in a mobile phone. The principles and operation of sharing user credentials in a mobile phone in accordance with the present invention can be better understood with reference to the accompanying description and drawings. Referring now to the drawings, Figure 4 is a simplified schematic block diagram of two embodiments of the present invention in accordance with a preferred embodiment. The first device 2A (e.g., cellular) is fused with the first device 200B. The expression "I physical engagement" as used herein means that the body of the first device 200A is inserted into the main 123739.doc 11 200818840 T of the second device 2B or mechanically connected to the body of the second device. The first η 崎 and the second device 2_ are temporarily served as a single integrated unit. For example, order. The first device 200 can be inserted into the slot of the second device 2 or can be inserted into the earpiece frame forming part of the second device 2 or connected to the second device 200A. The user credentials in the account:: voucher group 21包括 include: (9) if: use data (for example, the user's identification code, and the pre-recorded identification code of the operator's data); allow the user to access the credit Or the poor account of the bank account; "Ray" ^".;e-wallet; user contact and calendar information, user-owned content (for example, downloaded ringtones, music and =), And the code required to access the digitally protected content under the digital rights management (7) read mechanism. The group 210 is preferably a security chip (eg, a SIM card) constructed via an intervention protection entity and digital MM = protected content. Group 210 enables techniques known in the art to enable operation of device 200. The code and operating parameters are used to enable operation of device 200. The voucher group 21 can be packaged with _#+, A microprocessor that performs cryptographic operations (eg, encryption mechanism, query-return-to-private 4, ^ jade, digital signature, and password generation programs). ^^ Credential module 210 is connected to the module interface via #罟人2鸠 and operationally connected to Service 240Α. Winner 7 μR device; face 220 and module interface 230A include mechanical and electrical, octahedron and logic connection. Device interface 220 and module force are based on IS〇 7816 standard surface and reader interface. m 骷m 疋 My brother device 200A includes hardware and software for providing device service 123739.doc •12· 200818840 240A (for example, for enabling the phone, this article) A service module of the delivery, storage, and multimedia. At least some of the device services 240A need to access and use the user credentials in the credential module 210. In a similar manner, the second device 200B includes a credential module 21 (T, Device interface 220', module interface 23BB, and device service 240B. Device service 240B can be similar and/or different than device service 240A. For example, second device 200B can be integrated with a digital radio receiver for subscription based Broadcast high-power hands-free car phone. In this example, device service 240B includes: hardware and software for cellular phones and digital radio reception, all of which require the presence of credential module 210' In accordance with a preferred embodiment of the present invention, the first device 200A can be physically engaged with the second device 200B, thereby enabling the device service 240B to utilize the credential module 210 of the first device 200A. The module interface 230B can be utilized. The physical connection is made to the direct connection of the device interface 220 via connection B, or the direct connection of the module interface 230A via connection C. This will be described in more detail below with respect to Figures 5A through 5D. Thus, when the first device 200A is When the second device 200B is physically engaged, the second device 200B utilizes the credential module 210 of the first device 200A to operate. In contrast to the prior art of Figure 3A, when the second device 200B utilizes the voucher module 210, the first device 200A is preferably turned off (i.e., inoperable). Therefore, a connection is made between the second device 200B and the credential module 210, rather than between the second device 200B and the first device 200A. The above described operational modes with respect to the first device 200A and the second device 200B (where the second device 200B utilizes the user credentials of the voucher module I23739.doc -13 - 200818840 group 210 from the first device 200A) do not necessarily exclude prior art The conventional mode of operation (i.e., module transfer operation A of Figure 3A). In this prior art mode of operation, the credential module 210' is removed from the first device 200A and inserted into the second device 200B instead of attaching the first device 200A to the second device 200B. Figure 5A is a simplified schematic block diagram of an exemplary alternative for implementing connections B and C of Figure 4 in accordance with a preferred embodiment of the present invention. In Figure 5A, the credential module 210' includes a wafer/body 210C sandwiched between an upper contact surface 220C and a lower contact surface 220C'. The configuration enablement credential module 210' is accessed via connection C to the module interface 230A for operation of the first device 200A, or via connection B to the module interface 230B for use with the second device. The operation of 200B is as shown in FIG. The bodies of the first device 200A and the second device 200B are configured to allow physical contact between the contact surface 220C' and the module interface 230B if the first device 200A is engaged with the second device 200B. Figure 5B is a simplified schematic block diagram of an exemplary alternative for implementing connections B and C of Figure 4 in accordance with another preferred embodiment of the present invention. In FIG. 5B, the voucher module 210" has only a single contact surface 22GC** contact surface 220C" physically connected to the first module interface 230Af of the wafer/body 210C, thereby enabling the device service 240A to the voucher module 210. "Access." The first module interface 230A' is electrically coupled to the second module interface 230A", and the second module interface 230A" is configured to be modulo with the second device 200B when the second device 200B is physically engaged with the first device 200A' The interface 230B is interfaced to allow the credential module 210" to be stored by the device service 240B via the contact surface 220C", the first module interface 230A', the second module interface 230A", and the module interface 230B 123739.doc -14- 200818840 takes a Figure 5C is a simplified schematic block diagram of an exemplary alternative to the embodiment of Figure 5B in accordance with a preferred embodiment of the present invention. In FIG. 5C, the two-sided module interface 230A "1 connects the credential module 210" of the first device 200A11 to the device service 240A and the device service 240B (via contact with the module interface 230B). Figure 5D is based on A simplified schematic block diagram of an exemplary alternative to the embodiment of Figure 5C of the preferred embodiment of the present invention. In Figure 5D, when the first device 200A'" credential module 210" is coupled to the second device 200B ..., the module interface 230A "" and the module interface 230B'" use a contactless communication mechanism. Since the amount of data exchanged between the credential module 210" and the second device 200B" is extremely small, and since the first device 200A(1) and the second device 200B are all independently powered by independent power sources, the contactless communication mechanism can be utilized. Any wireless communication technology known in the art (eg, ISO 14443, NFC, Bluetooth, infrared, and acoustic interfaces).

Figure 6 is a simplified flow diagram of the operation of a credential sharing system in accordance with a preferred embodiment of the present invention. The components of Figure 4 (and reference numerals B) are included in the description for the sake of clarity. The user device required for the operation is accessed by the first device 200A accommodating the voucher module 210 (step 400). The operation of the first device 200 is then terminated (step 410). The first device 200A is then physically engaged with the second device 200 (e.g., by inserting the first device 200 into the slot or earpiece holder of the second device 200) (step 420). The first device 200 is physically coupled to the second device 200 (step 420) to establish a direct contact between the credential module 210 and the second device 200 (step 430), as in the embodiment of FIG. Alternatively, the physical connection between the first device 200 and the second 123739.doc -15-200818840 device 200B (step 420) is established between the credential module 21 and the second device 200B via the module interface 230A of the first device 200A. Contact (step 440), as in the embodiment of Figures 5B through 5d. Step 43 and 44〇

The second device 200B is in communication with the credential module 2 i (residing in the first device 2 (9) A) to receive the user credentials required for the operation of the second device 200B (step 460). It should be noted that the communication between the second device 200B and the credential module 21A is preferably performed by using a standard device/credential-module protocol, and preferably without any processor implicating or mediating, or forming a Performed in the case of 'communication functionality' of a part of device 2〇〇a. It should be understood that the user credential accessed by the first device 2 (10) A from the credential module 21 () in step 4 can be the same as the user credential accessed by the second device 200B from the credential "21" in step_ Or different. In both cases (ie, steps 4〇〇 and 46〇), these user credentials can respond to the user's selected 4 specific operations (example #, making a phone call, listening to a digit, no line) Broadcasting and initial e-banking transactions> should emphasize that 'although the device accommodating the voucher module 21' is usually a light device (preferably a honeycomb type (five)), the second | set 2 can be action or fixed Equipment (eg 'other-honeycomb phone, car phone headset, desktop accessory and personal computer). It should be further emphasized that the second device can include an independent voucher module (ie 'voucher module 210'), and / Or configured to receive the credential module 21 of the first device 200A after the credential module 21 has been removed from the first musical device 200A. Although a limited number of embodiments have been described with respect to the limited Ia, But it should be 'can carry out many changes, repairs of the invention 123739.doc -16- 200818840 [Simplified Schematic] FIG. 1 is a simplified schematic block diagram of a typical mobile device according to the prior art; ^ FIG. 2 is a typical mobile device connected to an accessory according to the prior art. BRIEF DESCRIPTION OF THE DRAWINGS Figure 3A is a simplified schematic block diagram of two exemplary mobile devices according to the prior art; Figure 3B is a simplified schematic block diagram of two typical mobile devices adapted from Figure 3 of Carlsson '282; Figure 4 BRIEF DESCRIPTION OF THE DRAWINGS FIG. 5A is a simplified schematic illustration of an exemplary alternative for implementing connections B and C of FIG. 4 in accordance with a preferred embodiment of the present invention; FIG. FIG. 5B is a simplified schematic block diagram of an exemplary alternative for implementing connections B and C of FIG. 4 in accordance with another preferred embodiment of the present invention; FIG. 5C is a preferred embodiment of the present invention. 5 is a simplified schematic block diagram of an exemplary alternative to the embodiment of FIG. 5B; FIG. 5D is a simplified schematic block diagram of an exemplary alternative to the embodiment of FIG. 5C in accordance with a preferred embodiment of the present invention; A simplified flow chart of the operation of the credential sharing system of the preferred embodiment of the present invention. [Description of main component symbols] 100 mobile device 10〇! Mobile device 123739.doc • 17- 200818840 First device second device credential module device interface Module interface device service device service device service accessory interface accessory device interface service first device first device first device first device second device second device voucher module voucher module voucher module chip/main device interface device interface 123739.doc -18 200818840 220C Upper contact surface 220Cf Lower contact surface 220C" Contact surface 230A Module interface 230A1 First module interface 230A" Second module interface 230AM, two-sided module interface 230AM,! Module interface 23 OB Module Interface 230B-" Module Interface 240A Device Service 240B Device Service A Module Transfer Operation B Connection C Connection 123739.doc -19-

Claims (1)

200818840 X. Patent Application Range: 1 · A system for sharing voucher, the system comprising: (a) a primary device comprising a voucher module operable to generate and utilize the voucher module Receiving a telephone call; and (b) at least one device to be configured to (ie, engage with the primary device entity to establish an interface with the credential module; and (1)) utilize the voucher module via the interface Group provides a service. _ 2· The system of claim 1, wherein the interface is electrically conductive. 3. The system of claim 1, wherein the interface is a short-range contactless interface. 4. The system of claim 3, wherein the short-range contactless interface utilizes at least one selected from the group consisting of: Communication technology: IS〇14443 technology 'NFC technology, Bluetooth technology, infrared technology and acoustic interface technology. 5. The system of claim 1, wherein the service comprises at least - a service selected from the group consisting of: enabling - telephone calling, transmitting - message of the message, providing - user - identification code, providing - operator One of the subscription records in the database, providing an identification code, providing the user with access to a credit account = providing access to the bank account, providing access to the electronic wallet, Providing access to the user's contact (4) library; providing access to the user's calendar database for access to content owned by 4 users, providing access to the ageing voice, providing music to the user Access, provide access to video and provide DRM access codes. 123739.doc 200818840 6. A primary device that can be reversibly engaged with a primary device for sharing credentials, the primary device comprising: U) - a credential module configured to enable the primary device to generate and receive calls And (b) an interface with the secondary device, the interface comprising: (I) a physical interface for physically reversibly engaging the primary device and the secondary device; and (II) a conductive device An interface operative to enable the secondary device to communicate with the credential module if it is accustomed to the entity. 7. A secondary device for sharing credentials with a primary device that is reversibly compatible with the device, the primary device having a credential module that enables the primary device to generate and receive a telephone call, the secondary device The method includes: (a) a service module 'configured to be enabled by the credential module; and (8) an interface for the primary device, the interface comprising: (1) a physical interface for the entity Reversibly engaging the secondary device with the primary device; and (^) a conductive interface operable to energize the secondary device with the voucher mode in the event that the secondary device is in physical engagement with the primary device Group communication. 8. The secondary device of claim 7, wherein the service module comprises at least one service selected from the group consisting of: empowerment - telephone call, transmission of one copy =: heart, providing one of the users An identification code, providing an identification code of one of the pre-records in the operator's, providing information that allows the user to access the account, and providing the user with access to a bank 123739.doc 200818840 = User's information, access to the e-wallet, access to the provider's contact library; provision of the user's calendar; access to the repository, provision to the user, owner-owned Access to the content, access to the ringtone, access to the audio, access to the video, and DRM access code. Sub-9. A method for sharing a voucher between a device having a voucher norm, and a device and a second, the method comprising the steps of: (a) selectively operating the Receiving (4) means for communicating with the credential module to generate and receive a telephone call; 9 (9) entity ejecting the first device and the second device; thereby connecting the second device and the credential module to One of the second devices can serve 0 10 · as in the method of claim 9, 11 · the method of claim 9, the contact interface. Wherein the interface connection comprises engaging electrical contacts. Wherein the interface connection comprises using a short path without a method such as a request item. The short-range contactless interface utilizes at least a communication technology selected from the group consisting of: IS〇14443 technology, technology, and Bluetooth technology. , infrared technology and acoustic interface technology. 13·################################################################################################## a subscription record-identification code in the database, providing information for allowing the user to access a credit account; providing access to a bank account for the user, providing access to an electronic wallet, providing Access to the user's contact 123739.doc 200818840; access to the user's calendar database, access to content owned by the user, access to ringtones Provide access to music, provide access to video, and provide DRM access codes. 123739.doc 4-