Authenticating multiple devices simultaneously using a single wireless subscriber identity module

Use a single wireless user identity module to authenticate multiple devices simultaneously

Technical field

The present invention generally relates to a subscriber identity module (SIM), and more specifically, the present invention relates to the simultaneous use of a SIM by multiple devices to gain access to a wireless communication network.

Background technique

A Subscriber Identity Module (SIM) is a device in a mobile phone, which is used to enable the mobile phone network to identify and authenticate users, so that the network can authorize users to make or receive calls. In addition, the SIM encrypts the session by using an algorithm known in the art. Most mobile phones currently use SIM. The SIM includes a processor and memory, and certain types of SIMs can be taken out of the mobile phone. The Universal User Identity Module (USIM) is the next generation SIM. In the following, SIM and USIM are collectively referred to as SIM.

Mobile phone service operators now usually provide users with Internet access through their mobile phones. In a mobile phone session, the SIM is used to identify and authenticate users seeking to connect to the Internet and to encrypt the data being transmitted.

A wireless communication network is a network that allows devices to be connected without cables or wires. It has become increasingly popular to connect to wireless communication networks to access the Internet through mobile computing devices, such as laptop computers or handheld devices. Many mobile phone network operators have or will enter the business of providing wireless communication networks in parallel with their mobile phone services. A well-known example of a wireless communication network is a wireless local area network, which provides higher access speeds than conventional wireless telephone networks.

Some users of mobile computing devices also have mobile phones with Internet access. If users have access to a wireless communication network, they can access the Internet through their phones or their mobile computing devices. However, in order to access the wireless communication network, a laptop or handheld device must be connected to the SIM. Therefore, every time the user wants to connect to the wireless network, the user must either equip each device that the user wants to connect to the wireless network with a SIM, or must remove the SIM from one device and insert it into another device. The problem with the first solution is that the user is forced to subscribe to two different services (mobile phone service and WLAN service) or, if the same operator operates these two networks, the user must use each device for accessing the Internet Accounting. In addition, family members who will use different devices to connect to the Internet must each have their own SIM, which complicates billing issues. The user must also synchronize the data held on multiple devices. The problem with the second solution is not only because the user must physically remove the SIM and insert it into another device, but also because only one device can be used to access the network at a time. Therefore, it is not possible to use only one SIM for simultaneous access. In addition, if the SIM is taken out of the mobile phone, the phone cannot be used to make or receive calls. Therefore, a simple way is needed to enable users with multiple devices to connect to the Internet on each device.

Summary of the invention

The present invention solves at least some shortcomings of the prior art by providing a SIM capable of wireless communication with a mobile device, so that at least one device can remotely use a SIM to connect to a wireless network. The SIM can appear in a mobile phone, or it can be a stand-alone device. Because the SIM does not need to be physically relocated in these devices, the mobile phone can still be used when a laptop or handheld device accesses the SIM.

Description of the drawings

Fig. 1 shows a conventional mobile phone with a conventional SIM in a mobile phone network; Fig. 2 shows a SIM according to various embodiments of the present invention; Fig. 3 shows the use of an independent SIM according to various embodiments of the present invention A mobile phone connected to a mobile phone network; FIG. 4 shows a mobile computing device using a wireless SIM to connect to a wireless communication network according to various embodiments of the present invention; FIG. 5 shows the use of a single SIM according to an embodiment of the present invention Figure 6 shows communication between a mobile computing device and multiple SIMs in its area according to various embodiments of the present invention; Figure 7 shows multiple SIMs and multiple SIMs in accordance with embodiments of the present invention Communication between multiple devices in the same area; Figure 8 illustrates that multiple mobile computing devices and mobile phones according to various embodiments of the present invention use multiple SIMs to access the network; Figure 9 illustrates various implementations according to the present invention Example of a method for discovering a SIM for a device; Figure 10 shows a method for sending an alarm when a device accesses a SIM according to various embodiments of the present invention; Figure 11 shows a method for using a mobile device according to an embodiment of the present invention SIM is a method of connecting to a wireless communication network.

detailed description

Various aspects of the present invention provide functions that allow a user of a laptop device or a handheld device to wirelessly use a subscriber identity module (SIM) that is not connected to the user's device to access a wireless communication network. The SIM can exist in the mobile phone or as a standalone device. The user subscribes to the service through a wireless service operator that may control the wireless communication network and the mobile phone network. When the user desires to connect to the Internet by means of the user's mobile computing device (such as a laptop computer or a handheld device), the user's mobile computing device wirelessly communicates with the SIM to obtain identification information. Once the information is obtained, the user can access the wireless communication network through the mobile computing device as if the SIM is connected to the device.

Figure 1 shows how a mobile phone capable of accessing the Internet generally works in a conventional system. The mobile phone 100 includes a SIM 102 that can or cannot be removed. The mobile phone communicates with the mobile station 104 connected to the mobile phone network 106. The mobile phone service operator operates the network 106. If a mobile phone user wants to use the Internet, the user can access the Internet through the mobile phone network 106 connected to the Internet 108.

The SIM 102 is used to enable the mobile phone network 106 to identify a mobile phone user, the mobile phone network 106 authenticates and authorizes the user, and the user's information is stored in a database, such as a home location register (HLR). The SIM 102 also encrypts speech and data transmission through algorithms, so that others cannot overhear the conversation. If the SIM 102 is removed from the mobile phone 100, the user cannot make or receive calls, or access the Internet. The SIM 102 stores several types of data. Management data involves manufacturers, business operators, identity and security information. Temporary network data is information about phone location and temporary security and identity values. Business data is information about whether users can access different services. The SIM 102 can also store applications that run services or provide features. Finally, the SIM 102 includes the personal data entered by the user. The Universal Subscriber Identity Module (USIM) is a SIM compatible with the Universal Mobile Telecommunications System (UMTS).

Figure 2 details the SIM 102 disclosed in various aspects of the present invention. The SIM includes a microprocessor 200 and a memory 202, which have been standardized in the field. The SIM may also include a wireless transceiver 204. In different embodiments of the present invention, wireless transceivers can be used, but are not limited to Bluetooth, 802.11a, 802.11b, infrared, GSM, small-range WLAN, and other communication protocols. In some embodiments of the present invention, the SIM may include a power module 206, such as a battery, but not every embodiment adopts it. If the SIM is a stand-alone device described below, the power module 206 may be included.

The SIM can be part of the mobile phone and/or can be a standalone device. If it is used as a standalone device, the user can carry it in a wallet, which allows the user to conveniently access public communication terminals or pay highway tolls. In addition, a separate SIM with, for example, put in a wallet has certain security advantages.

Figure 3 shows how the mobile phone works when the SIM is a standalone device. When a user wants to make or receive a call or access the Internet 310, the mobile phone 300 communicates with the SIM 304 through the wireless transceiver 302 in the phone and the wireless transceiver 312 in the SIM 304. The mobile phone 300 requests identification information from the SIM 304, and the SIM 304 transmits the identification information to the phone 300. The phone then uses the identification information to send it to the mobile station 306, and the mobile station 306 transmits it to the mobile phone network 308. The network 308 then authenticates and authorizes the user and processes accounting information, such as billing. If the user wishes to access the Internet 310, the net 308 can provide this function. The mobile phone 300 works as if it has a SIM inside. In different embodiments of the present invention, the mobile phone network may be, but is not limited to GSM, WCDMA, 3GPP, TDMA, CDMA, FDMA, IP phone, UMTS or PCS. In addition, in different embodiments, the SIM may be a USIM. Finally, the mobile phone 300 is not limited to the use of the SIM 304. It can connect to the mobile phone network 308 using other SIMs. In some embodiments, the phone 300 can be configured to automatically use the phone user's SIM, but can still be reconfigured to use another SIM.

If the SIM is included in a mobile phone, as in some embodiments, the function of the system is similar to that of FIG. 1. As shown in FIG. 2, the SIM 102 may include a wireless transceiver 204, and in addition, it may include a power module 206. As mentioned above, in different embodiments of the present invention, the mobile phone network can be, but is not limited to GSM, WCDMA, 3GPP, TDMA, CDMA, FDMA, IP telephony, UMTS or PCS. In addition, in different embodiments, The SIM can be a USIM.

FIG. 4 shows how the mobile computing device 400 is connected to the wireless communication network in the present invention. The mobile computing device 400 may include one or more wireless transceivers 402 and 404. When the user desires to access the wireless communication network 408, the mobile computing device 400 must locate the SIM 406. In some embodiments, the device 400 can be pre-configured to use the SIM 406, or the user can tell the device to use the SIM 406. In another embodiment, the device can search for nearby SIMs and return a list of SIMs to the user, who can then choose which SIM to use. As explained above, the SIM 406 may be integrated into the mobile phone, or in a different embodiment, the SIM 406 may be a stand-alone device. Once the SIM 406 is located, the wireless transceiver 404 communicates with the SIM. In different embodiments, the wireless transceiver 404 can be used, but is not limited to Bluetooth, 802.11a, 802.11b, infrared, GSM, or small-range WLAN. SIM 406 provides identification information to the mobile computing device 400, and the mobile computing device 400 can then connect to the wireless communication network 408 using the identification information. The mobile computing device 400 may use the same wireless transceiver 404 or different wireless transceivers 402 to communicate with the wireless communication network 408. The transceiver that communicates with the wireless communication network can be used, but is not limited to 802.11a, 802.11b, GSM or WLAN. The protocol used for communication paths 414 and 416 need not be used for communication paths 418 and 420. In addition, for security purposes, the protocol used for the communication path 414 may be different from that used for the path 416, and the protocol used for the path 418 may be different from that used for the path 420. For example, the transceiver 404 can use Bluetooth to transmit, and the SIM 406 can use infrared to return. Furthermore, in various embodiments, the SIM 406 may be a USIM. The communication between the mobile computing device 400 and the SIM 406 does not include the transfer of secure data (such as encryption algorithms or long-term keys). Instead, when the device 400 requests access to secure data, it sends an inquiry to the SIM 406, and the SIM 406 sends back a response to the device 400. For example, the device 400 needs some data to be decrypted, so it sends an inquiry to the SIM 406 to request decryption. The SIM 406 will decrypt the data using the stored algorithm, and the SIM 406 will transmit these data back to the device 400. Therefore, the security data will not be leaked.

The wireless communication network 408 performs its own authentication and authorization, but it can communicate with the mobile phone network 412. Once authentication and authorization have occurred, the user can access the wireless communication network 408 and the Internet 410 connected to the wireless communication network 408.

At this point, the mobile computing device 400 functions as if the SIM 406 is inserted into the device 400. However, because the SIM 406 is not inserted into the device 400, and because the SIM 406 is wireless, other devices can use the SIM to authenticate the network at the same time. Figure 5 shows a system where multiple devices access the network at the same time. The devices 500, 502, and 504 can all request identification information from the SIM 506. The SIM 506 can be part of a mobile phone or a standalone device. In some embodiments, the device 500 may be a mobile phone that uses identification information to communicate with the mobile phone network 510. In some embodiments, the device 502 may be a handheld device, such as a personal digital assistant (PDA), and the device 504 may be a laptop computer, both of which can communicate with the wireless communication network 508 using the identification information. Therefore, the system allows multiple devices to use the same identification information from the same SIM to simultaneously access different networks operated by a common operator. Through this system, a user can access the wireless communication network 508 through the user's laptop computer without losing the ability to use the user's mobile phone to make and receive phone calls. Furthermore, in various embodiments, the SIM 506 may be a USIM.

FIG. 6 shows a scenario when a single mobile computing device 600 is within the range of multiple SIMs 604, 606, 608, and 610. In some embodiments, the user of the device will pre-configure the device 600 so that the wireless transceiver 602 knows to always use the SIM 604, for example. In another embodiment, when the user wants to connect to the wireless communication network, the user of the device will notify the device to use, for example, the SIM 604. In yet another embodiment, the device will search for SIMs in this area. The device will display a menu to the user showing a list of SIMs 604, 606, 608, and 610 within the range. The user then selects which SIM to use from the menu. Furthermore, in various embodiments, the SIM may be a USIM.

FIG. 7 shows a scenario where there are multiple mobile computing devices 708, 710, and 712 in the same area of multiple SIMs 700, 702, and 704. The SIM 704 is contained in the mobile phone 706. However, it operates in the same way as SIM 700 and 702. If verified and authorized, any mobile computing device can use any SIM. In addition, if verified and authorized, all three devices 708, 710, and 712 can use the same SIM at the same time to obtain identification information. As described above, even if the mobile computing devices 708, 710, and 712 are using the SIM 704, the mobile phone 706 can be used. In addition, in different embodiments, any SIM may be a USIM.

Figure 8 illustrates an embodiment of the present invention. The mobile phone 800 can use the embedded SIM 802 to connect to the mobile phone network 808 through the mobile station 806. Or if the mobile phone user has a separate SIM 804, the mobile phone 800 can use the SIM to connect to the mobile phone network 808. In this case, the mobile phone 800 communicates with the SIM 804 through a wireless protocol (such as Bluetooth). The mobile phone 800 can use the mobile phone network to make and receive calls and access the Internet 816. A user who also owns a mobile computing device such as a laptop computer 810 or a handheld device 812 may wish to connect to a wireless communication network 814, such as a WLAN. The user can access the SIM 802 or the standalone SIM 804 in the user's mobile phone 800. Regardless of the method used, the laptop computer 810 and the handheld device 812 can communicate with the SIM 802 or the SIM 804 using a wireless protocol (such as Bluetooth). Using the identification information retrieved from the SIM 802 or the SIM 804, the wireless communication network 814 can authenticate and authorize the user. Subsequently, the user can access the wireless communication network 814 and the Internet 816.

Several features of this embodiment make it very practical. The laptop computer 810 and the handheld device 812 can use the SIM 802 or the SIM 804 at the same time. The SIM 802 does not have to be removed from the mobile phone 800 to be used by the laptop computer 810 or the handheld device 812. When the laptop computer 810 or the handheld device 812 is using the SIM 802, the mobile phone 800 can make or receive calls through the mobile phone network 808, and access the Internet 816. The same operator may operate both the wireless communication network 814 and the mobile phone network 808. Therefore, users only subscribe to one network operator, still have the same security level and access both networks. Since the user can receive all his Internet and mobile phone access through a single operator and a single account, this simplifies account billing. In addition, the mobile phone network 808 and the wireless communication network 814 can support mutual authentication, which means that the same identification information can authenticate users on both networks.

In some embodiments, network service operators may wish to implement additional features. First, operators may minimize any changes in their subscriber databases (such as HLR and HSSLR). In addition, mobile phone networks and wireless communication networks can support conventional SIM and USIM. Operators can minimize changes in the software used for mobile devices and the need to manage the software. Finally, the system may support existing hardware in the wireless network.

The flowchart of FIG. 9 describes the steps of searching for the SIM in more detail. In decision step 900, the device will determine whether it is pre-configured to use a certain SIM. If so, go to step 910 to try to access the SIM. If not, the device asks the user to enter the SIM in step 902. If the user makes an input, in step 910, the device will try to access the SIM. If the user has not entered, in step 904, the device will search for SIMs in the area, and in step 906, it will return a menu with a list of available SIMs. In step 908, the user may select a SIM, and the device attempts to access the SIM in step 910. Step 910 is the same as step 1000 in FIG. 10. Therefore, as described below, as in step 1002, when the user tries to access the SIM, in step 912, the owner of the SIM (which may be the same person as the user) will be prompted.

The system provides security to prevent unauthorized users from using the SIM. First, any user must enter credentials (such as a password) to verify that he is authorized to use the SIM. In addition, the SIM can be programmed for specific devices. However, this method can limit the functionality and compatibility of the SIM. The relatively small range of SIMs provides an additional level of security for unauthorized users, although this partly depends on the type of protocol used for communication between the SIM and the device. In any case, the owner knows that potential unauthorized users must be within the specific range specified by the wireless protocol used. Another security measure is that the SIM can be powered off to prevent others from accessing it. Another step to prevent unauthorized use is that when someone tries to access the SIM, an alarm can be sent to the SIM or the alarm can be transmitted to a designated device. If the alarm reaches the SIM directly, it can beep or give other types of signals. If the alarm reaches the designated device, a message will be displayed to inform the user of the visit. The user can decide whether the access is authorized and can allow or disallow the access.

The steps of this process are described in further detail in Flowchart 10. In step 1000, device X (e.g., mobile phone or mobile computing device) accesses a SIM (embedded in the mobile phone or standalone). In step 1002, the SIM wirelessly sends an alarm to the predetermined master device A. The main device is likely to be the device most frequently used by the user or worn on the body. In step 1004, the user at device A receives an alarm in the form of a message popped up on the device. The message informs the user that another device has requested identification information from the SIM, and in the decision step 106, the message presents the user with a choice of allowing the access or not allowing the access. If the user chooses not to allow the access, a message will be sent to the SIM to deny access to the requesting device in step 1008, and the SIM will not send identification information to the requesting device in step 1012. On the other hand, if the user chooses to allow the access, then in step 1010, the device will send a message to the SIM to allow the access of the access device. In this case, in step 1012, the SIM will grant access to the requesting device.

Figure 11 shows in more detail the process of fetching identification information from the SIM when the user of the mobile device wishes to connect to the wireless communication network. In step 1100, the device requests identification information from a SIM. In step 1102, the SIM sends an inquiry to the device, which is the first layer of security. In step 1104, the user will be prompted to enter the user credentials, and in step 1106 the device will send back a response with the credentials to the SIM. In step 1108, the SIM will try to authenticate the user. If the response is invalid, then in step 1122, the user will deny access to the identification information. If the response is valid, in step 1110, the SIM will send identification information to the device, and in step 1112, the device will connect to the wireless communication network. In step 1114, the network will ask the user to enter a password, which is the second layer of security. In step 1116, the user will enter the password, and in decision step 1118, the network will attempt to authenticate the user. If the user cannot be authenticated, then in step 1120, the network will deny access. If the network can authenticate the user, then in step 1124, the network will attempt to authorize the user. If the user cannot be authorized, then in step 1126 the network will deny access. If the network can authorize the user, then in step 1128, it will grant access.

Figure 12 shows another aspect of the invention, the automatic synchronization of information between devices. This aspect of the invention eliminates the need to manually re-enter data and the need to manually synchronize data through software. The synchronization in Figure 12 is automatic and transparent to the user. The user can input data 1200 (such as an entry in a phone book) on the mobile phone 1202 communicating with the SIM 1204. When the laptop computer 1206 and the handheld device 1208 begin to communicate with the SIM 1204, the SIM automatically synchronizes the laptop computer 1206 and the handheld device 1208 and updates their phone books. In some embodiments, the data 1200 may be stored on the phone 1202, and the SIM 1204 may provide synchronization by extracting the data 1200 from the phone 1202 and sending it to the laptop computer 1206 and the handheld device 1208. In another embodiment, the data 1200 may be stored in the SIM 1204 itself. Thus, when data is input to the phone 1202, it will be quickly transmitted to the SIM 1204. In some embodiments, the SIM 1204 may be included in the phone 1202, and in some embodiments, the SIM 1204 may be a USIM.

Although the present invention has been described in terms of specific examples including the currently preferred mode for carrying out the present invention, those skilled in the art should be aware that there are a large number of changes and changes to the above-mentioned systems and technologies. Therefore, the spirit and scope of the present invention as set forth in the appended claims should be interpreted broadly.