Storage of and access to configuration data in a mobile station and a user module

The invention relates generally to the technical field of storing and accessing data in mobile devices as well as user modules such devices. A preferred field of the invention are mobile devices, the user both telecommunications functions (such as the Voice and / or data transmission over a telecommunications network) as application programs (eg a scheduler or a text editor) provide. Such mobile devices can especially be powerful Mobile phones or as personal digital assistants (PDAs = personal digital assistants) to be configured.

The German patent application DE 197 24 901 A1 shows a mobile telephone according to the GSM standard (GSM = global system for mobile communication). The mobile telephone includes a control unit, a device memory and a Interface for a subscriber identification module (SIM = subscriber Identity Module) on. Via a line connection to a computer of user data, such as address lists or turnover data or price lists, are loaded into the device memory. Further, the possibility is provided for, via the line connection unspecified programs in to load and run later by the mobile device memory allow. Data transmission can be integrity protected or encrypted done.

As a rule, when you turn a GSM mobile phone an authorization check performed in which the user requires a personal identification number must enter (PIN = personal identification number). full UI including the ability to access the in the Mobile phone stored user data is only entered the correct PIN enabled. The most confidential user data are thus in some extent secured. However, there is the problem that these Backup can be avoided with sufficient criminal energy. So for example by means of suitable devices of memory chips are mobile phone read out directly at the hardware level.

The storage of user data in the mobile device is particularly useful if the mobile device and for executing application programs is adapted to process these user data. These Functionality is already in powerful GSM mobile phones given and PDAs. For mobile devices the 2.5-th and 3-th generation, eg devices for networks GPRS (General Packet Radio Service), EDGE, UMTS (Universal Mobile Telecommunications System) and WCDMA (wideband code-division multiple access), it is because of the high transmission speeds realistic, application programs on the air interface, to load by a service provider in the mobile device and / or update.

In the aforementioned mobile devices, there are problems or need for improvement in several respects. First, here is an unauthorized be prevented in applications access. It is therefore to ensure that only the authorized user, an application program or individual secured functions of the application program can call. Second, a possibility would be desirable to the user tailored as closely as possible to their needs Offer variety of functions. D Ritten is a possible achieved broad device independence of the functions provided will. From EP-A 1107627 a mobile device is known, wherein storing and reading of configuration data, and performing described application programs, wherein the Application programs are stored in a device memory. Of the but user has no information about which Application programs or individual functions in the mobile radio device Are available.

The invention has the task of these problems completely or partially to solve. In particular, by the invention, the safety and Protection against unauthorized access to applications in a Mobile device can be increased. In preferred embodiments, the invention provide further comfort for the user and can be realized at low cost.

This object is wholly or partly achieved by a The method with the features of claim 1, a mobile device with Features of claim 8 and a user module having the features of claim 10. The dependent claims relate to preferred Embodiments of the invention.

The invention is based on the basic idea, by suitable storage the configuration data, the above-mentioned safety requirements to fulfill.

The invention is based on the basic idea, by the configuration data Availability of the entire application program or individual Functions of the application program specify. The configuration data are stored in the user module, while the application program is present in the mobile device. The application program is only or only run in the periphery, as indicated by the configuration data is specified.

The teaching of the invention provides protection against unauthorized execution the application program or individual program functions, since in addition to the mobile device is always also the user module to the corresponding, execution, permitting configuration data required is. The invention further provides the technical basis to a exactly tailored to the needs of the user application settings provide. This is particularly of importance when for the program using a set by the available functionality related fee is payable, as for example in ASP offerings (ASP = application service providing) is the case. Since according to the invention the configuration data is stored in the user module, can the user by simply plugging the user module of him desired configuration with any compatible mobile devices to adjust.

As used herein the term "application" in particular Programs to understand the data processing functions with regard Run the above user data. If it is at the Mobile device is a device with telecommunication functions are the application programs preferably independent of these telecommunication functions or at least can also be used for other purposes. Examples of typical applications are organizer, Address books, text editors, spreadsheets, databases, Dictation recording programs and so on. Programs that only User interfaces for the applications mentioned above or similar provide (during the actual data processing operations by are running the server of an ASP provider), are in use here Sense be construed as application programs. In some Embodiments are also browser and viewer for formatted display provided documents as application programs. Application programs can also playback programs Multimedia content, for example, be in mp3.

To further increase the protection against unauthorized execution the application programs is preferably reading the configuration data by a password and / or biometric verification, eg a voice or fingerprint analysis, secured. The user module only the configuration data freely, thus enabling the Run the corresponding application program or the corresponding program function, when the user through the Password and / or identify his biometric data sufficiently could.

The functionality according to the invention is also applicable to mobile devices, the one or more permanently stored application programs included. Preferably, however, the configuration data are also used to load application programs, or at least parts thereof, in the mobile device control. Particularly in mobile devices, the most powerful have functions for wireless data transmission, the application programs can or the required program modules over the air interface be loaded from an external service provider. This possibility is particularly advantageous in connection with ASP offerings. The convenience for the user is significantly increased, if it is already by the mere use of the user module on any compatible Mobile device, an automatic loading of the required application programs can initiate depending on its configuration. The vendor-independent loading of application programs is the Use of programming languages ​​supported, regardless of the computer platform work, as, for example, applies to Java®.

Especially advantageous is a compound of two aspects of Invention, as this provides protection against unauthorized access to the Payload and protection against unauthorized execution of application programs is achieved.

The mobile device is in preferred embodiments a telecommunications device, in particular a mobile phone or a personal digital Assistant (PDA) with telephony functions. The user module is preferably a subscriber identification module (SIM = subscriber identification Module), as also required to log-in a telecommunications network becomes. In particular, a user module may be provided as the so-called trusted device or tamper resistant device is tamper secured, so that a spying the encryption and decryption functions or the key data or confidential configuration data is prevented. The use of a subscriber identity module also lends itself to, if the mobile device any telephony functions having or the module is not registered with a telephony provider, because such modules are produced in large numbers and thereby are relatively inexpensive available.

The mobile device and the user module are preferably provided with features further developed in the those described above and / or dependent in the Method claims mentioned features meet.

Further features, advantages and objects of the invention emerge from the following detailed description of an embodiment of the invention and several alternative embodiments apparent. It is schematic to the referenced drawings in which Figure 1 is a block diagram of essential functional units a system according to the presently described embodiment of the invention.

In Fig.1, a mobile device 10 and a user module 12 are shown, the are connected to each other via an interface fourteenth The mobile device 10 is embodied in the present embodiment as a powerful smart phone, the telecommunications functions according to the standards GSM provides for telephony services and GPRS for data transmission services. Accordingly, the user module 12 is formed as a SIM card, in which the mobile phone is used or is to be arranged in the mobile phone. Via an air interface 16 is capable of the mobile device 10 to a corresponding Telecommunications network access 18th In alternative embodiments, the mobile device 10 according to a more advanced mobile communications standard, for example, UMTS, and / or as a personal digital assistant (PDA), which is also may be multimedia-capable, designed.

In known manner, the mobile device 10 a high-frequency portion 20 which sends radio waves via an antenna 22 and receives. On digital signal processor (DSP) 24 is used for processing the transmission and Received signal. Further, the digital signal processor 24 processes the low-frequency signals, over a low frequency portion 26 to a speaker 28 directed or from a microphone 30 via the low-frequency part 26 are output to the digital signal processor 24th A processor unit 32 coordinates all the mobile device 10 processes taking place. The processor unit 32 is connected to the interface 14, the digital Signal processor 24, a designed here as Graphic LCD Display Display 34, a keyboard 36 and a memory device 38. Of the Device memory 38 can be permanently installed or removable, for example, in Be designed as a memory card.

The device memory 38 is different by a plurality of semiconductor chips in Storage technologies implemented. In the conceptual illustration of Figure 1, the device memory 38 a read-only area 40 (Eg implemented as mask-programmed ROM) and a rewritable Portion 42, for example implemented as a RAM or EEPROM, or FLASH memory, on. The read-only area 40 of the device memory 38 contains in particular Operating programs 44 by the processor unit 32 as a basic Operating system of the mobile device 10 as well as to implement the Telecommunications functions are performed. In the writable Section 42 are loaded application programs 46 and payload 48th

1 shows an example of the application programs 46 a scheduler 46.1 (with address book function) and a text editor 46.2. As user data 48 are shown in FIG. 1 is a deadline and address list 48.1 for the appointment scheduler 46.1 and 48.2 a letter shown for the text editor 46.2. The application programs 46 are executed by the processor unit 32 and access to the payload 48th The user data 48 are in the device memory 38 stored encrypted, which is indicated in Fig. 1 by hatching.

The user module 12 is a subscriber identification module (SIM) for the Telecommunications network 18 configured, and also the interface 14 corresponds to mechanically and electrically to this telecommunications network 18 provided standards. The user module 12 has a form of a microcontroller configured processor unit 50, which on a single chip is integrated with a memory module 52nd The module memory 52 is by different storage technologies in a read-only area 54 and divided a recordable area 56th

The module memory 52 contains control programs and data, the first provide basic operating system functions for the user module 12 and secondly, the registration and the telecommunications operation allow the mobile device 10 in relation to the telecommunications network 18th For reasons of clarity, these control programs and Data in FIG. 1, not separately shown. For the present invention Aspects of the embodiment described herein particularly relevant shown and therefore in Fig. 1 are cryptographic functions 58 in the read-only Section 54 of the module memory 52 and key data 60 Configuration data 62 in the recordable area 56th

The cryptographic functions 58 include an encryption function 64, a decryption function 66 and a key generation function 68. The key data 60 is divided into a public Key 70 and private key 72. The configuration data 62 have each provided in the mobile device 10 application program 46 a corresponding configuration data set, namely described here Embodiment a configuration data record 62.1 for the scheduler 46.1 and a configuration data record 62.2 for the Text editor 46.2.

In operation, the system shown in Figure 1, the conventional telecommunication functions according to the respective standards, in the present Case GSM and GPRS, ready. In addition, the user can use the application programs 46 call and with the useful data 48 or other data edit.

To deploy the application programs 46 accesses the mobile device 10 at power on or at the latest when the user an application program wants to start 46, the configuration data 62 in the user module 12 to. This access is via the processing unit 50 of the user module 12, which in turn initially requests a password entry before it enables access. The password request is displayed on the display 34 the mobile device 10 appears and the user enters the appropriate Password using the keypad 36th The correct password is checked by the processor unit 50th

Once the user has entered the correct password, then transmits the User module 12 the requested configuration data 62 (either all Configuration data 62 or only the relevant for the application program 46.1, 46.2 record provided 62.1, 62.2) to the mobile device 10th The processor unit 32 now checks whether according to the transferred configuration data 62, 62.1, 62.2, the execution of application programs 46 or the specifically requested application program 46.1, 46.2 is permitted. If this is the case, then the program execution is enabled.

If the desired application program 46.1, 46.2 to Device memory 38 is, the program can be started without further will. Otherwise, the required program or user data, the possibly can be kostenplichtig, via the air interface 16 and the Telecommunications network 18 from a server of an ASP provider in the Device memory 38 is loaded. Also this download process must go through the User module 12 authorizes the case a so-called gatekeeper operates. Even if the desired application program 46.1, 46.2 is included in the device memory 38, however, a request via the air interface 16 at the ASP service provider to firstly to transmit billing data, and secondly, if appropriate, present Program updates to take into the mobile device 10th

The configuration data 62 relate to the embodiment described here not only the basic user rights, but also preferred settings of the application programs 46, for example, preset file paths, language settings, menu configurations and other user preferences. These settings are the called made available to the application program 46, so that the user always works with the program configuration desired by him. This applies even if the user his user module 12 with a new or other mobile device 10 connects.

With sufficient standardization of application programming interfaces (APIs = application programming interfaces), such as those by using the programming language Java® medium term is expected to allow an ASP provider customized for each user and independent of the used mobile device 10 application services to offer. Moreover, a high level of safety achieved, since all application programs 46 only at presence the user module 12 and password required are accessible. Around abuse in a theft of the mobile device 10 in ON State (after the password input by the user) to prevent, can be provided that after an interruption of user activity again requested a password entry for a predetermined duration is, as for example in screen savers for stationary office computer is already known per se.

In the embodiment described so far was the smallest unit for the authorization mechanism and optionally the loading process via the air interface 16, an application program 46 viewed. Depending on the programming technology used but can also a finer granularity can be used. It can be the Configuration data 62, for example, on the user's authority to execute individual program functions or individual program modules relate, and this program functions or program modules can be individually loaded via the air interface 16, if necessary. By doing so, long loading times are firstly avoided and secondly, can you more control to the user preferences done. Even with the update of application programs 46 via the air interface 16 are preferably only those program modules transmit that located opposite the already in the mobile device 10 Version have actually changed.

The 46 processed by the application programs of user data 48 are in the device memory 38 either completely or at least partially in encrypted Form filed. For example, the user a file system are provided for storing the payload data 48, wherein individual folders or individual drives for either an encrypted can be set or unencrypted data storage. A similar functionality for stationary office computer without the use of a user module is already the product of the manufacturer PGPdisk® Network Associates, Inc., known.

When an application program 46 user data 48 in an encryption wants to store the designated area of ​​the file system, are this data by the processor unit 32 via the interface 14 to the user module 12 transferred. The processor unit 50 of the user module 12 performs the encryption function 64 from which the data in the key 60 contained public key is used 70th The encrypted 48 are user data via the interface 14 and the processor unit 32 written into the device memory 38th

Access to encrypted stored user data 48 is similar. Again, the processor unit 50 of the user module 12, the actual Decryption using the decryption function 66 and the private key from 72nd Preliminary requests the processor unit 50 However, a password input by the user on. Only when the correct was password (passphrase) on the keyboard 36 input (or a performed other biometric identification of the user correctly was), the decryption process is enabled.

In the embodiment described here is the encryption and decryption carried out according to an asymmetric RSA method. In alternative embodiments, are against other asymmetrical or symmetrical Encryption and decryption process, or mixed forms thereof, eg symmetric Encryption using an asymmetrically encrypted Key is provided. With symmetrical method does not need distinction between the public key 70 and private key 72 to become.

Overall, it is ensured by the here proposed technique that the encrypted payload 48 only read or used can be when the user module 12 of the authorized user to the interface 14 is connected and the user himself, for example by means of passphrase, has correctly identified.

In the present embodiment, the entire supply and Decryption process by the processor unit 50 of the user module 12 performed using the key data 60 never the user module 12 leaving. However, alternative embodiments are provided in where the encryption function 64 and the public key 70, which not to be kept secret needs, handed over to the mobile device 10 , so that the encryption process by the generally powerful processor unit 32 of the mobile device 10 is performed can be. For the decryption process can in some Alternative embodiments are also used, the processor unit 32 so long as that, the security of the private key is not 72 is compromised.

For generating the key data 60 is in the present embodiment the key generation function 68 used, also by the processor unit 50 of the user module is running 12th On se known way this program calculates a pair of public Key 70 and private key 72. By so doing particularly high data security guarantees, because the private key 72 the user module 12 does not leave even in the key generation.

The embodiment described herein is not limited to a single encrypted Area for the user data 48 and not on a single encryption method limited. For example - corresponding Legitimation by the passphrase provided - an encrypted will range deactivated at any time and thus made freely available. Also, a re-encryption with the same or another user module 12 is possible. It can also buy several encrypted Areas, optionally with different key pairs and / or in various sizes, are created and managed.

Particularly in the present embodiment, the ASP a provider provides the encrypted payload 48, in addition to storage in the mobile device 10 via the air interface 16 to a server of the transmitted ASP provider and stored there. synchronization the mutually stored user data 48 can with each write access an application program 46 or when a user session ends or take place at the express request of the user. Of the User then has one hand quick access to the locally stored User data 48 and on the other hand of the used mobile terminal 10 independent because it the user data stored at the ASP provider 48 can get with any other mobile device.

Furthermore it can be provided in some embodiments, a key component to leave the network operator or the ASP provider. After successful logon of the mobile device 10 in the telecommunication network 18, these key component is transmitted via the air interface 16, so that the network operator or ASP providers control over certain in the mobile device 10 stored user data 48 tells the user.