Classifications

• • H—ELECTRICITY
  • H04—ELECTRIC COMMUNICATION TECHNIQUE
  • H04B—TRANSMISSION
  • H04B1/00—Details of transmission systems, not covered by a single one of groups H04B3/00 - H04B13/00; Details of transmission systems not characterised by the medium used for transmission
  • H04B1/38—Transceivers, i.e. devices in which transmitter and receiver form a structural unit and in which at least one part is used for functions of transmitting and receiving
  • H04B1/40—Circuits
• • H—ELECTRICITY
  • H04—ELECTRIC COMMUNICATION TECHNIQUE
  • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
  • H04L63/00—Network architectures or network communication protocols for network security
  • H04L63/02—Network architectures or network communication protocols for network security for separating internal from external traffic, e.g. firewalls
  • H04L63/0209—Architectural arrangements, e.g. perimeter networks or demilitarized zones
• • H—ELECTRICITY
  • H04—ELECTRIC COMMUNICATION TECHNIQUE
  • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
  • H04L63/00—Network architectures or network communication protocols for network security
  • H04L63/02—Network architectures or network communication protocols for network security for separating internal from external traffic, e.g. firewalls
  • H04L63/0227—Filtering policies
• • H—ELECTRICITY
  • H04—ELECTRIC COMMUNICATION TECHNIQUE
  • H04M—TELEPHONIC COMMUNICATION
  • H04M3/00—Automatic or semi-automatic exchanges
  • H04M3/42—Systems providing special services or facilities to subscribers
  • H04M3/436—Arrangements for screening incoming calls, i.e. evaluating the characteristics of a call before deciding whether to answer it
• • H—ELECTRICITY
  • H04—ELECTRIC COMMUNICATION TECHNIQUE
  • H04W—WIRELESS COMMUNICATION NETWORKS
  • H04W12/00—Security arrangements; Authentication; Protecting privacy or anonymity
  • H04W12/08—Access security
  • H04W12/082—Access security using revocation of authorisation
• • H—ELECTRICITY
  • H04—ELECTRIC COMMUNICATION TECHNIQUE
  • H04W—WIRELESS COMMUNICATION NETWORKS
  • H04W12/00—Security arrangements; Authentication; Protecting privacy or anonymity
  • H04W12/08—Access security
  • H04W12/084—Access security using delegated authorisation, e.g. open authorisation [OAuth] protocol
• • H—ELECTRICITY
  • H04—ELECTRIC COMMUNICATION TECHNIQUE
  • H04W—WIRELESS COMMUNICATION NETWORKS
  • H04W12/00—Security arrangements; Authentication; Protecting privacy or anonymity
  • H04W12/08—Access security
  • H04W12/088—Access security using filters or firewalls
• • H—ELECTRICITY
  • H04—ELECTRIC COMMUNICATION TECHNIQUE
  • H04W—WIRELESS COMMUNICATION NETWORKS
  • H04W4/00—Services specially adapted for wireless communication networks; Facilities therefor
  • H04W4/60—Subscription-based services using application servers or record carriers, e.g. SIM application toolkits
• • H—ELECTRICITY
  • H04—ELECTRIC COMMUNICATION TECHNIQUE
  • H04W—WIRELESS COMMUNICATION NETWORKS
  • H04W4/00—Services specially adapted for wireless communication networks; Facilities therefor
  • H04W4/70—Services for machine-to-machine communication [M2M] or machine type communication [MTC]
• • H—ELECTRICITY
  • H04—ELECTRIC COMMUNICATION TECHNIQUE
  • H04W—WIRELESS COMMUNICATION NETWORKS
  • H04W4/00—Services specially adapted for wireless communication networks; Facilities therefor
  • H04W4/16—Communication-related supplementary services, e.g. call-transfer or call-hold
• • H—ELECTRICITY
  • H04—ELECTRIC COMMUNICATION TECHNIQUE
  • H04W—WIRELESS COMMUNICATION NETWORKS
  • H04W8/00—Network data management
  • H04W8/18—Processing of user or subscriber data, e.g. subscribed services, user preferences or user profiles; Transfer of user or subscriber data
  • H04W8/183—Processing at user equipment or user record carrier
• • H—ELECTRICITY
  • H04—ELECTRIC COMMUNICATION TECHNIQUE
  • H04W—WIRELESS COMMUNICATION NETWORKS
  • H04W88/00—Devices specially adapted for wireless communication networks, e.g. terminals, base stations or access point devices
  • H04W88/02—Terminal devices

Definitions

• the present invention relates to wireless devices employing subscriber identification modules, and means for filtering and regulating incoming and outgoing communications, data and events on such devices.
• the fixed dialing number (FDN) service of Global System for Mobile Communications (GSM) and Universal Mobile Telecommunications System (UMTS) may allow outgoing calls and bearer services and teleservices to be restricted but does not control the plurality of data and communications that may be received by modern wireless devices.
• GSM and UMTS barred dialing number (BDN) service can prevent outgoing calls to defined phone numbers but does not control incoming calls and does not control the plurality of data and communications that can be sent and received by modern wireless devices.
• Intelligent networks using Customized Applications for Mobile Network Enhanced Logic (CAMEL) or Wireless Intelligent Network (WIN) technologies deployed in a wireless telephony network may provide some degree of control over the data and communications that may be sent and received by modern wireless devices in a wireless telephony network but they are complicated, expensive and time consuming to deploy.
• CAMEL Mobile Network Enhanced Logic
• WIN Wireless Intelligent Network
• the present invention is related to systems and methods for providing finegrained control of the plurality of data, communications and events that can be sent and received by wireless devices in a network.
• the present invention is a method for using a SIM-based firewall to filter and regulate events that may occur in a wireless device or SIM card.
• the method comprises: reading configuration settings; registering with a wireless device, and starting timers; detecting an event; determining whether the event matches criteria for allowance; and, if the event matches, allowing the event. If the event is not allowed, the method may then comprise terminating the event; determining whether to notify the external interface; and potentially transmitting an indication to the external interface. The method may also comprise transmitting to a remote system an indication that the event was detected and/or blocked.
• the present invention is the method for remotely managing a SIM-based firewall.
• the method comprises: receiving a remote management event from the network.
• the remote management event may comprise one or more of: instructing the SIM-based firewall to stop; instructing the SIM-based firewall to re-start; modifying the configuration settings of the SIM-based firewall; saving the modified configuration settings of the SIM-based firewall; modifying the executable files and libraries of the of the SIM-based firewall; and saving the modified executable files and libraries of the SIM-based firewall.
• the present invention is a digital electronic system or systems for performing any of the methods described above. Brief Description of the Drawings
• FIG. IA is a block diagram depicting one embodiment of a wireless device incorporating a SIM-based firewall connected to a network;
• FIG. IB is a block diagram depicting one embodiment of a network
• FIGs. 2A and 2B are flow diagrams depicting various embodiments of an event being processed by a SIM-based firewall
• FIG. 3 is a flow diagram depicting one embodiment of a method performed by a SIM-based firewall for filtering events.
• FIG. 4 is a flow diagram depicting one embodiment for remotely managing a SIM-based firewall.
• a wireless device 101 comprises a Central Processing Unit (CPU) 103, a Subscriber Identity Module (SIM) 107, a SIM-based firewall (109), a radio transceiver (115) and an external interface (EI) 1 11.
• the wireless device may be in communication with one or more networks 105, and may be in communication with one or more transmitter/receiver stations 113.
• a wireless device 101 refers to any device capable of transmitting and receiving voice and/or data (non-voice) information to and from a network without the use of wires, cables or other tangible transmission media.
• the wireless device 101 may comprise a mobile phone.
• a wireless device may comprise a cellular phone, a smart phone, a fixed-mobile convergence phone, a satellite phone, a wireless data card, a wireless personal digital assistant (PDA), a wireless modem or computers and electronic systems that communicate wirelessly.
• PDA wireless personal digital assistant
• the wireless device 101 comprises a SIM 107.
• SIM 107 may be a smart card that may comprise one or more of: CPU, Cryptographic Processor, Read only memory (ROM), Random access memory (RAM), Electrically- Erasable Programmable Read-Only Memory (EEPROM) and input/output circuits.
• a SIM 107 may be used to store unique subscription and authentication information about the owner of the SIM 107, the network that the SIM 107 has permission to connect to, the services that the SIM 107 may access on a network and an address book of telephone numbers.
• a SIM 107 may comprise one or more valued added applications. Such applications may comprise: banking, biometric, medical, security, productivity, identity management, digital signature, public key infrastructure (PKI), multimedia, ticketing, digital rights management, gaming, and loyalty applications.
• the SIM applications may employ SIM Application Toolkit (SAT) technology or other smart card application technologies.
• SAT SIM Application Toolkit
• a wireless device may comprise a Universal Integrated Circuit Card (UICC) in place of a SIM.
• a UICC may comprise one or more Identity Module (IM) technologies of: GSM Subscriber Identity Module (SIM), UMTS Internet Protocol Multimedia Services Identity Module (ISIM), CDMA Removable User Identity Module (R-UIM), plus value added applications.
• the UICC applications may use one or more technologies of: USAT (Universal SIM Application Toolkit), CCAT (CDMA Card Application Toolkit), CAT (Card Application Toolkit), UATK (UIM Application Toolkit) or other smart card technologies.
• SIM 107 is used generically to represent both the SIM card and the UICC with a USIM, or other IM, application residing on the UICC.
• a SIM 107 may comprise a SIM-based firewall application 109, herein referred to as a SIM firewall 109.
• a SIM firewall 109 may comprise programmable logic that that detects, filters and regulates data, communications and events that pass, in either direction, between a network 105, a wireless device 101, SIM 107, and an external interface 111 of the wireless device.
• the SIM firewall 109 may evaluate the data, communications and events against one or more configurable criteria. If the data, communications and events match the specified criteria they may be rejected, or allowed to continue in either direction between a network 105, a wireless device 101, SIM 107 and the external interface 111 of the wireless device.
• the SIM firewall 109 may be transferred and installed onto the SIM 107 as part of the manufacturing process of the SIM 107, using Over The Air (OTA) management with SMS or Cell Broadcast (CB) messages, using Bearer Independent Protocol (BIP), using Java Remote Method Invocation (RMI), using Java 2 Micro Edition (J2ME) midlets that support the Security and Trust Services API for J2ME (SATSA) specification, using the operating system of the wireless device, using an application on the wireless device, using a Card Acceptance Device (CAD) or other smart card reader that is physically connected to the SIM, using contactless smart card technology that is able to communicate with the SIM by means of short range radio frequency technology.
• OTA Over The Air
• BIP Bearer Independent Protocol
• RMI Java Remote Method Invocation
• J2ME Java 2 Micro Edition
• SATSA Security and Trust Services API for J2ME
• the SIM firewall 109 may be managed remotely over the network using one or more of: SMS messages, Cell Broadcast messages, BIP, Java RMI, J2ME midlets that support the SATSA specification or other remote management technologies, the operating system of the wireless device, applications on the wireless device.
• the embodiments may allow a person to manage a SIM firewall 109 without being physically connected to the SIM 107.
• the SIM firewall 109 may be managed locally using a Card Acceptance Device (CAD) or other smart card reader that is physically connected to the SIM; using contactless smart card technology that is able to communicate with the SIM by means of short range radio frequency technology.
• CAD Card Acceptance Device
• the SIM firewall may start automatically when the mobile device powers up and may stop when the mobile device powers down.
• the SIM firewall may also be stopped and started by any or all of the local and remote management technologies described herein.
• a wireless device 101 may include an external interface (EI) 111.
• An external interface may comprise one or more of: man-machine interface (MMI) and machine to machine interface (M2M).
• MMI may comprise any device allowing a person to interact with or operate the wireless device, including without limitation a screen, camera, finger print reader, a keyboard, a keypad, a microphone, optical sensor, audio sensor, a motion sensor, a speaker.
• An M2M may comprise any device allowing another device to exchange data with the wireless device or operate the wireless device, including without limitation, an RS-232 serial communication data port, manufacturer's proprietary communication data port, Universal Serial Bus (USB) data port, Bluetooth transceiver data port, Ultra Wideband (UWB) transceiver data port, Infrared data port, other short range radio frequency technology data port, or other data port that allows a wireless device to communicate with another device.
• USB Universal Serial Bus
• Bluetooth transceiver data port Bluetooth transceiver data port
• Ultra Wideband (UWB) transceiver data port Ultra Wideband (UWB) transceiver data port
• Infrared data port other short range radio frequency technology data port, or other data port that allows a wireless device to communicate with another device.
• the wireless device 101 may be in communication with a network 105.
• a network 105 may comprise any known network capable of receiving wireless transmissions.
• a network 105 may comprise one or more, and any or all of the following: wireless devices described in the art as Mobile Stations (MS) 101; Base transceiver stations (BTS) 113, Base station controllers (BSC) 147, Mobile switching centers (MSC) 117, Home location registers (HLR) 119, Authentication centers (AuC) 121, Visitor location registers (VLR) 123, Gateway mobile switching centers (GMSC) 125, Public Switched Telecomm Networks (PSTN) 127, Short Message Service centers (SMSC) 129, Equipment Identity Registers (EIR) 131, Unstructured Supplementary Services Data (USSDGW) gateways 133, Internet Application Servers (IAS) 135, Gateway General Packet Radio Service (GPRS) Support Nodes (GGSN) 137, Serving GPRS Support Nodes (SGSN) 139, Packet Data Networks (PDN) 141, SIM OTA Servers (OTA) 143,
• MS Mobile Stations
• BTS Base transceiver stations
• the network 105 described herein may comprise a generalized GSM/GPRS network, though a person skilled in the art would appreciate that the invention may be deployed in alternative networks employing different bearers, protocols, technologies, architectures and topologies.
• a network 105 may employ one or more of: Universal Mobile Telecommunications Service (UMTS), Code Division Multiple Access (CDMA including CDMA2000 Ix, CDMA2000 IxEV-DO, CDMA2000 IxEV-DV, CDMA TIA/EIA/ANSI-95A/B), GPRS, Enhanced Data rates for GSM Evolution (EDGE) 5 Wideband Code Division Multiple Access (W-CDMA), Personal Digital Cellular (PDC), Integrated Digital Enhanced Network (iDEN), High-Speed Uplink Packet Access (HSUPA) UMTS, High Speed Downlink Packet Access (HSDPA) UMTS, Freedom of Mobile Multimedia Access (FOMA), Time Division-Synchronous Code Division Multiple Access (TD-SCDMA), Time Division- Code Division Multiple Access (TD-CDMA),
• a network 105 initiates an event (step 201) which is received by the wireless device.
• a SIM-based firewall 109 operating inside the wireless device 101 detects the event (step 203), and evaluates the event (step 205).
• the SIM-based firewall allows the event (step 207) and the event then continues (step 209) where it is passed to the EI 111.
• the event may then complete by a transmission from the EI 111 to the wireless device (step 211) which is then passed to the network (step 213).
• a network 105 initiates an event (step 201) which is received by the wireless device.
• the event may comprise one or more of: voice call, video call, PTT call, cell broadcast message, SMS message, instant messaging message, Wireless Application Protocol (WAP) push message, Multimedia Messaging Service (MMS) notification, SIM update message, Enhanced Messaging Service (EMS) message, Electronic mail notification, Electronic mail message, incoming encrypted/unencrypted data connection notification, incoming encrypted/unencrypted data connection, mobile TV data, paging/polling of the wireless device, incoming radio, video or other multi media content, wireless device operating system update, wireless device application update, wireless device firmware update, installation of a new wireless device application.
• WAP Wireless Application Protocol
• MMS Multimedia Messaging Service
• MMS Multimedia Messaging Service
• EMS Enhanced Messaging Service
• Electronic mail notification Electronic mail message, incoming encrypted/unencrypted data connection notification, incoming encrypted/unencrypted data connection, mobile TV data, paging/polling of the wireless device
• the event may then be detected by a SIM-based firewall application running on a SIM (step 203) in the wireless device.
• the SIM firewall may have previously registered with the wireless device or the wireless device operating system that it is to be notified of one or more events that may be received from the network.
• information about the event and control over the incoming event may be passed from the wireless device to the SIM firewall.
• the SIM may actively detect one or more events.
• the event may then be evaluated by the SIM firewall against configurable criteria (step 205) that may be stored on the SIM or wireless device.
• the criteria may comprise one or more of: event type, incoming or outgoing event, data type, data content, application type, protocol, bearer, source address, destination address, time, date, previous amount of usage, and previous number of events.
• the SIM firewall may evaluate source and destination addresses by partial and/or full matches.
• the SIM firewall may evaluate addressing schemes that may comprise one or more of: Internet protocol (IPv4 and/or IPv6) addresses and/or port numbers, Uniform Resource Locator addresses, Email addresses, GPRS APN (Access Point Name)s, MSISDN (Mobile Station Integrated Services Digital Network) numbers, USSD service codes, Cell IDs, IMEI (International Mobile Equipment Identity), IMSI (International Mobile Subscriber Identity), SMS port number, wireless device port number, other addressing schemes supported by the wireless device.
• the SIM firewall may evaluate events by any combination of one or more time components. For example a parent may specify that a child cannot use a mobile phone to make and or receive calls from friends during school hours. Or, for example, a company manager may specify that company mobile phones can only be used during working hours on weekdays.
• the SIM firewall may also evaluate events on a configurable scheduled basis, e.g. it may evaluate a condition every 10 seconds.
• the SIM-based firewall may allow the event to proceed (step 207) and control of the event is passed from the SIM to the wireless device and then to the external interface of the wireless device (step 209).
• the external interface of the wireless devices may then process the event (step 209).
• the event may be processed by one or more of: the M2M or MMI interface of the external interface.
• the event may complete by a transmission from the external interface 111 to the wireless device (step 211) which is then passed to the network (step 213).
• control of the event is passed from the SIM to the wireless device and then to the external interface of the wireless device (step 209)
• control of the event may be passed to one or more entities of: the wireless device, applications on the wireless device, the operating system of the wireless device, the firmware of the wireless device, the SIM, applications on the SIM, for processing.
• the event may complete by a transmission from the receiving entity, which may then be passed to the network (step 213).
• a network 105 initiates an event (step 201) which is received by the wireless device.
• a SIM-based firewall 109 operating inside the wireless device 101 detects the event (step 203), and evaluates the event (step 205).
• the SIM-based firewall prohibits the event and the event is terminated (step 219).
• the event may then complete by a transmission from the wireless device to the network (step 221).
• a network 105 initiates an event (step 201) which is received by the wireless device. This step may be performed as described in connection with FIG 2A.
• the event may then be detected by a SIM-based firewall application running on a SIM (step 203). This step may be performed as described in connection with FIG 2A.
• the event may then be evaluated by a SIM-based firewall application against configurable criteria (step 205) that may be stored on the SIM or wireless device. This step may be performed in accordance with any of the embodiments described herein. In the embodiment shown, the event is prohibited by the configured criteria and the SIM firewall prevents the event from continuing.
• the event is then terminated (step 219) and control is passed to the wireless device.
• the termination of the event may complete by a transmission from the wireless device to the network (step 221).
• a SIM-based firewall may detect and evaluate other events that may be initiated by a wireless device (101), a SIM (107), applications on a SIM, the external interface of a wireless device (111), or events that may be inferred by a SIM-based firewall (109).
• Events initiated by a wireless device may include without limitation: events generated by timers, events generated by external or internal card readers, events relating to accessing or modifying the file system or memory of the wireless device, events relating to accessing or modifying accessing external storage technologies such as SD (Secure Digital) flash, MMC (Multi Media Card) flash, Compact Flash storage, Memory Sticks, Flash RAM/ROM, EPROM (Erasable Programmable Read-Only Memory), EEPROM (Electrically-Erasable Programmable Read-Only Memory), solid state memory, hard drives, NAND flash storage, events relating to starting or terminating an application or service that executes on a wireless device, events generated by the operating system of a wireless device, events relating to starting or terminating a data session on a wireless device, events relating to receiving a Bluetooth communication from another device, events relating to receiving an Infra red communication from another device, and events relating to receiving a communication from another device using short range radio technology.
• SD Secure Digital
• MMC Multi Media Card
• Events initiated by the external interface of a wireless device may include: events relating to a user manipulating a button on the wireless device, events relating to a user manipulating a joystick on the wireless device, events relating to a user manipulating user input mechanisms including voice control of the wireless device, events relating to a user sending an SMS message, events relating to a user sending an MMS message, events relating to a USSD message, events relating to a user sending an instant message, events relating to a user starting or terminating a voice call, events relating to a user starting or terminating a video call, events relating to a user starting or terminating a VOIP call, events relating to a user starting or terminating a PTT call, events relating to a user starting or terminating a Bluetooth data session, events relating to a user starting or terminating a infra red data session, events relating to a user starting or terminating a data session, events relating to a user starting or terminating a service on the wireless
• Events initiated by a SIM may include: events generated by applications on the SIM, events relating to accessing or modifying the file system or memory of the SIM, events relating to accessing or modifying encrypted or otherwise protected files or memory of the SIM, and events relating to cryptographic operations applied to files or memory of the SIM.
• the method comprises: reading configuration settings (step 303); registering with a wireless device, and (step 305); detecting an event (step 307); determining whether the event matches criteria for allowance (step 309); and, if the event matches, allowing the event (step 311). If the event is not allowed, the method may then comprise terminating the event (step 313); determining whether to notify the EI (step 315); and potentially transmitting an indication to the EI (step 317).
• the SIM firewall reads configuration settings (step 303).
• the firewall reads configuration settings from a file stored on the SIM.
• the firewall reads configuration settings from the memory of the SIM.
• the firewall reads configuration settings from a file otherwise stored on the wireless device.
• a configuration setting comprises a file or area of memory on a wireless device or SIM.
• the file or area of memory may comprise one or more of: the source addresses, destination addresses, protocols, bearer, event types, incoming or outgoing directions, data types, data content, applications, resources, times during which an event may be allowed or prohibited, whether the external interface should be informed if an event is prohibited, and whether an event matching one or more of these criteria should be allowed or prohibited.
• the SIM-based firewall After the SIM-based firewall reads the configuration settings (step 303), it may then register with a wireless device, and may start any required timers (step 305). The SIM firewall registers with the wireless device any events specified in the configuration settings that it is to be notified of by the wireless device.
• the SIM firewall may start one or more timers to expire at times specified in the configuration settings. In other embodiments the SIM firewall may request the wireless device to start one or more timers to expire at intervals defined in the configuration settings. When a timer expires the SIM firewall is notified of the event by the wireless device
• a SIM firewall determines whether the event matches the criteria for allowance (step 309). If the event matches the criteria for allowance the event is permitted (step 311) whereupon the SIM firewall is ready to detect another event (step 307). Said determination may be made using any criteria and information described herein. In other embodiments, a SIM firewall may determine whether an event matches criteria for denial. In still other embodiments, a SIM firewall may determine whether to allow an event based on both criteria for allowance and criteria for denial. In one embodiment, a SIM firewall may comprise a hierarchy of criteria. For example, a SIM firewall may comprise criteria to deny all outgoing calls to a given area code, but allow calls from a particular number within said area code.
• the event may be terminated (step 313) whereupon the SIM firewall is ready to detect another event (step 307).
• the SIM firewall accesses the configuration settings to determine if the external interface should be informed that a prohibited event has been terminated (step 315) whereupon the SIM firewall is ready to detect another event (step 307).
• the SIM firewall may transmit an indication to the network that an event was terminated (step 313), or permitted (step 311).
• the transmission may use one or more of: SMS message, USSD, BIP, HTTP/HTTPS, GPRS, TCP/IP, UDP or any other communication technologies
• the network or the wireless device may subsequently send a notification to a person, wireless device, computer, server, or any other electronic system that the event was detected and/or terminated.
• the network or wireless device may send the notification using electronic mail, SMS, EMS, MMS, instant message, voice call, video call, VOIP call, PTT call or voice call that uses interactive voice response (IVR), voice extensible markup manguage (VXML) and text to speech (TTS) technologies, HTTP/S, TCP/IP, UDP, extensible markup manguage (XML) or other communication technologies.
• IVR interactive voice response
• VXML voice extensible markup manguage
• TTS text to speech
• the network may send an email notification to a parent's email address that a call from a given phone number was blocked from reaching a child's phone.
• a wireless device may send a notification to a log accessible by a corporate accounts manager that a user of the device was blocked from placing a call to a given area code.
• a wireless device may send a text message to a parent's mobile device that a given internet site or IP address is being accessed by a child's mobile phone.
• the method comprises: receiving a remote management event (step 407) from a network.
• the remote management event may comprise one or more of: instructing the SIM firewall to stop (step 409); instructing the SIM firewall to re-start; modifying the configuration settings (step 411) of the SIM firewall; saving the modified configuration settings (step 413) of the SIM firewall; modifying the executable files and libraries (415) of the of the SIM firewall; saving the modified executable files and libraries (417) of the SIM firewall; and restarting the SIM firewall (419).
• a SIM firewall may perform the above method for processing local management events. This method may be performed in accordance with any of the embodiments described herein.
• the remote management event may be received, and in some cases modified, by an application on the wireless device, or the operating system of the wireless device and then transferred to the SIM firewall or SIM.
• a SIM firewall receives a remote management event from a network (step 407). This step may be performed in accordance with any of the embodiments described herein.
• a SIM firewall may receive a remote management event comprising instructions for the SIM firewall to stop running (step 409).
• the instructions to stop running may comprise instructions to stop running permanently; to stop running until the wireless device is powered on at which point the SIM firewall will re-start; or to stop running until instructed to start again.
• the SIM firewall may then stop running accordingly.
• a SIM firewall may receive a remote management event comprising instructions to modify the configuration settings (step 411).
• the instructions to modify the configuration settings may contain instructions and data to overwrite the existing configuration settings with new configuration settings, or delete the existing configuration settings and replace them with new configuration settings data.
• the SIM firewall then saves the new configuration settings to persistent storage on the SIM, or wireless device (step 413).
• the SIM firewall may use the configuration settings immediately, or it may restart (step 419) and read the configuration settings.
• a SIM firewall, or the SIM operating system may receive a remote management event comprising instructions to modify the libraries and files of the SIM firewall application (step 415).
• the instructions to modify the libraries and files the SIM firewall may contain instructions and the data necessary to delete the libraries and files and replace them with new libraries and files, or overwrite the libraries and files with new libraries and files.
• the instructions to modify the libraries and files of the SIM firewall may contain instructions to download new libraries and files from a location on the network.
• the SIM firewall or the SIM operating system, then saves the files and libraries to persistent storage on the SIM or wireless device (step 417).
• the SIM firewall then uses the new libraries and files immediately, or it may restart (step 419) to use the new libraries and files.
• a person, wireless device, computer or electronic system may use the methods described to remotely set the configuration settings of a SIM firewall.
• a person using an internet web browser connects to a website that allows authorized users to modify the configuration settings of the SIM firewall.
• the website may then connect to a network and transmits the configuration settings to the SIM firewall.
• the network then transmits notifications that an event was terminated or permitted to the website, or to a wireless device or electronic system.
• a person may use SMS, MMS, EMS, instant messaging, Wireless Application Protocol (WAP), i-mode, IVR or other communication technologies to remotely set the configuration settings.
• WAP Wireless Application Protocol
• configuration settings may be set remotely by a user using one or more of IPTV, interactive TV, mobile web sites, voice recognition system, or voice automation system.
• configuration settings may be set remotely by a user using a second mobile device.
• the configuration settings may be sent directly from the second mobile device to the device to be configured, such as, for example, by a Bluetooth connection.
• a parent having recently purchased a mobile phone for a child, may log into a website which allows the parent to specify numbers to which the phone may send and from which the phone may receive calls, and any other firewall settings.
• the website may then transmit the configured settings to the child's phone where they will be activated.
• a company may use a website to configure a plurality of wireless devices distributed to company employees. A manager may access the website to set a maximum number of minutes which may be used by the devices. The website may then transmit the configured settings to all devices specified by the company.

Landscapes

• Engineering & Computer Science (AREA)
• Computer Security & Cryptography (AREA)
• Signal Processing (AREA)
• Computer Networks & Wireless Communication (AREA)
• Computer Hardware Design (AREA)
• Computing Systems (AREA)
• General Engineering & Computer Science (AREA)
• Mobile Radio Communication Systems (AREA)
• Computer And Data Communications (AREA)
• Telephonic Communication Services (AREA)
• Data Exchanges In Wide-Area Networks (AREA)

Priority Applications (3)

Applications Claiming Priority (2)

Publications (2)

Family

ID=38657164

Family Applications (1)

Country Status (6)

Cited By (6)

Families Citing this family (55)

Family Cites Families (7)

• 2007
  • 2007-06-08 JP JP2009513779A patent/JP2009540648A/ja not_active Withdrawn
  • 2007-06-08 KR KR1020087029839A patent/KR20090029199A/ko not_active Withdrawn
  • 2007-06-08 US US12/303,878 patent/US20100227588A1/en not_active Abandoned
  • 2007-06-08 CN CNA2007800213190A patent/CN101502146A/zh active Pending
  • 2007-06-08 WO PCT/IB2007/001105 patent/WO2007141607A2/en not_active Ceased
  • 2007-06-08 EP EP07734423A patent/EP2039188A2/en not_active Withdrawn

Also Published As

Similar Documents

Legal Events