Storage of and access to configuration data in a mobile station and a user module

The invention relates generally to the technical field of storing and accessing data in mobile devices as well as user modules for such devices. A preferred field of the invention are mobile devices that the user both telecommunications functions (such as voice and / or data transmission over a telecommunications network) and application programs (eg a scheduler or a text editor) provide. Such mobile devices may be configured in particular as a high-performance mobile phones, or as a personal digital assistants (PDAs = Personal Digital Assistants).

The <patcit id="pcit0001" dnum="DE19724901A1"><text>German patent application DE 197 24 901 A1</text></patcit> shows a mobile phone according to the GSM standard (GSM = Global System for Mobile communication). The mobile telephone includes a control unit, a device memory and an interface for a subscriber identification module (SIM = Subscriber Identity Module). Via a line connected to a computer user data can, for example, address lists or sales information or price lists are loaded into the device memory. Furthermore, the possibility is provided to load via the line connection unspecified programs in the device memory and can later run by the mobile phone. The data can be transferred integrity secured or encrypted.

From the <patcit id="pcit0002" dnum="EP0730387A2"><text>European Published Patent Application EP 0730387 A2</text></patcit> is a mobile phone is known, which can be reached under several phone numbers. The individual numbers that are stored in a "Number Assignment Module", different phone books and / or speed dial lists are assigned.

From the <patcit id="pcit0003" dnum="US5814798A"><text>US Patent US-PS 5,814,798</text></patcit> discloses the use of a portable data carrier for storing preferences for example a mobile phone. These preferences are for example used to adjust color, brightness and contrast, and a special character set and so on.

Usually an authorization check is performed on power of a GSM mobile phone, when the user must enter a personal identification number (PIN = personal identification number). The complete user interface including the ability to access the user data stored in the mobile phone will be released only after correct entry of the PIN number. The most confidential user data are therefore protected to a certain extent. However, there is the problem that this assurance can be avoided with sufficient criminal energy. Thus can be read directly on the hardware level, for example by means of suitable devices memory devices of the mobile phone.

The storage of user data in the mobile device is particularly useful when the mobile device is also adapted to execute application programs for processing this user data. This functionality is now added even at powerful GSM mobile phones and PDAs. For mobile devices the 2.5-th and 3-th generation, including equipment for the networks GPRS (General Packet Radio Service), EDGE, UMTS (Universal Mobile Telecommunications System) and WCDMA (wideband code-division multiple access), it is because of the high transmission speeds realistic to load application programs over the air interface from a service provider in the mobile device and / or update.

In the aforementioned mobile devices, there are problems or a need for improvement in several respects. First, here unauthorized access to application programs are intended. It should therefore be ensured that only the authorized user can call an application program or individual secured functions of the application program. Secondly, a possibility would be desirable for the user to possible precisely tailored to their needs selecting functions. Thirdly, the broadest possible device independence of the functions provided are achieved. From the <patcit id="pcit0004" dnum="EP1107627A"><text>EP-A 1107627</text></patcit> is a mobile device, in which the storing and reading configuration data and the execution of application programs is described, wherein the application programs are stored in a device memory. However, the user has no information about which applications or individual functions are available in the mobile device.

The invention has the task of these problems to solve completely or partially. In particular should be increased in a mobile device by the invention, the safety and protection against unauthorized access to application programs. In preferred embodiments, the invention also aims to provide high level of comfort for the user and can be realized inexpensively.

According to the invention this object is wholly or partly solved by a method having the features of claim 1, a mobile device with the features of claim 7 and a user module having the features of claim 9. The dependent claims relate to preferred embodiments of the invention.

The invention starts from the basic idea to meet with an appropriate storage of the configuration data, the above-mentioned safety requirements.

The invention is based on the idea to provide the configuration data, the availability of the entire application program or individual functions of the application program. The configuration data is stored in the user module, while the application program is present in the mobile device. The application program will only be executed or only to the extent, as indicated by the configuration data.

The teaching of the invention provides protection against unauthorized execution of the application program or individual program functions, as well as the user module with the corresponding execution permitting configuration data is required in addition to the mobile phone only. The invention further provides the technical basis to provide a precisely tailored to the needs of the user application settings. This is especially important if the program use a provided by the available functionality related fee is payable, as for example in ASP offers (ASP = application service providing) is the case. Since according to the invention, the configuration data is stored in the user module, the user can adjust by simply plugging the user module his desired configuration with any compatible mobile devices.

As used herein the term "application" is meant, in particular programs that perform data processing functions with regard to the above-mentioned user data. If it is the mobile device is a device with telecommunication functions, the application programs are preferably independent of these telecommunication functions, or at least also used for other purposes. Examples of typical applications are organizer, address books, text editors, spreadsheets, databases, dictation recording programs and so on. Programs that provide only user interfaces for the applications mentioned above or similar (while the actual data processing operations are performed by the server of an ASP provider) should be interpreted in the sense used here as application programs. In some embodiments also Browser and Viewer for formatted display of documents are provided as application programs. but application programs may also playback programs for multimedia content, for example, in MP3 format.

To further increase the protection against unauthorized execution of the application programs is preferably read out the configuration data with a password and / or biometric verification, such as a voice or fingerprint analysis, secured. The user module is only the configuration data freely, thus allowing the execution of the corresponding application program or the related program function, when the user was able to sufficiently identify with the password and / or his biometric data.

The inventive functionality can also be used in mobile devices that contain one or more permanently stored application programs. Preferably, however, the configuration data are also used to control the loading of application programs, or at least parts of it into the mobile device. Particularly in mobile devices, which have powerful functions for wireless data transmission, the application programs or the required program modules via the air interface of an external service provider can be loaded. This possibility is particularly advantageous in connection with ASP offerings. The convenience for the user is greatly enhanced if it may already initiate automatic loading of the required application programs according to its configuration by the mere use of the user module on any compatible mobile device. The manufacturer-independent loading of application programs is supported through the use of programming languages ​​that work regardless of the computer platform, as is the case for example in Java®.

Especially advantageous is a compound of two aspects of the invention, it could cause a protection against unauthorized access to user data and protection against unauthorized execution of application programs is achieved.

The mobile device is in preferred embodiments a telecommunications device, in particular a mobile phone or a personal digital assistant (PDA) with telephony functions. The user module is preferably a subscriber identification module (SIM = Subscriber Identification Module), as it is also required to log-in a telecommunications network. In particular, a user module can be provided, which is a so-called trusted device or tamper resistant device tamper secured, so that a spying the encryption and decryption functions or the key data or confidential configuration data is prevented. The use of a subscriber identity module lends itself to even wen n the mobile device has no telephony functions or the module is not registered with a telephony provider, because such modules are manufactured in large quantities and thus are relatively inexpensive available.

The mobile device and the user module are preferably further developed with features that correspond to the features described above and / or mentioned in the dependent method claims.

Further features, advantages and objects of the invention will become apparent from the following detailed description of an embodiment of the invention and several alternative embodiments. Reference is made to the schematic drawing, in which Fig. 1 is a block diagram of essential functional units of a system according to the presently described embodiment of the invention.

In Fig.1, a mobile device 10 and a user module 12 are shown, which are interconnected via an interface fourteenth The mobile device 10 is configured in the present embodiment as a powerful mobile phone that provides telecommunications functions according to the standards GSM telephony services and GPRS for data transmission services. Similarly, the user module 12 is designed as a SIM card which is inserted into the mobile phone or is fixed in the mobile phone. Via an air interface 16 the mobile terminal 10 is able to access a corresponding telecommunication network 18th In alternative embodiments, the mobile device 10 according to an advanced mobile phone standard, eg UMTS, and / or a personal digital assistant (PDA), which may also be multimedia-capable, designed.

In known manner, the mobile device 10 a high-frequency part 20, sends the radio wave via an antenna 22 and receives. A digital signal processor (DSP) 24 is used for processing the transmit and receive signal. Further, the digital signal processor 24 processes the low-frequency signals which are routed via a low-frequency part 26 to a speaker 28 and outputted from a microphone 30 via the low frequency portion 26 to the digital signal processor 24th A processor unit 32 coordinates all the mobile device 10 processes taking place. The processor unit 32 is connected to the interface 14, the digital signal processor 24, a here designed as Graphic LCD display 34, a keyboard 36 and a device memory 38th The device memory 38 may be fixed or removable, for example in the form of a memory card, run.

The device memory 38 is implemented by a plurality of semiconductor chips in different memory technologies. In the conceptual illustration of FIG. 1, the device memory 38 a read-only area 40 (eg, implemented as a mask-programmed ROM) and a recordable area 42, for example, implemented as RAM or EEPROM or FLASH memory on. The read-only area 40 of the device memory 38 contains particular operating programs 44 that are executed by the processor unit 32 as the basic operating system of the mobile device 10 and the implementation of telecommunication functions. In the recordable area 42 application programs 46 and user data 48 are loaded.

1 shows an example of the application programs 46 a scheduler 46.1 (with address book function) and a text editor 46.2. As payload 48 are in FIG. 1 is a deadline and address list 48.1 for the appointment scheduler 46.1 and a letter 48.2 shown for the text editor 46.2. The application programs 46 are executed by the processor unit 32 and access to the payload data 48 too. The user data 48 are stored encrypted in the device memory 38, which is indicated in Fig. 1 by hatching.

The user module 12 is provided as a subscriber identification module (SIM) configured for the telecommunications network 18, and also the interface 14 corresponds to mechanically and electrically the envisaged for this telecommunication network 18 standards. The user module 12 includes a microcontroller configured as a processor unit 50 which is integrated on a single chip with a memory module 52nd The module memory 52 is divided by different storage technologies in a read-only area and a recordable area 54 56th

The module memory 52 contains control programs and data which provide first basic operating system functions for the user module 12 and second, enable, the registration and the telecommunication operation of mobile device 10 with respect to the telecommunication network 18th For the sake of clarity, these control programs and data in Fig. 1 are not shown separately. Cryptographic functions 58 are stored the module memory 52 and key data 60 and configuration data 62 in the recordable area 56 in the read-only area 54th

The cryptographic functions 58 include an encryption function 64, a decryption function 66 and a key generation function 68. The key data 60 are divided into a public key 70 and a private key 72nd The configuration data 62 are each in the mobile device 10 intended application program 46 a corresponding configuration data set, namely in the embodiment described herein, a configuration data record 62.1 for the appointment scheduler 46.1 and a configuration data record 62.2 for the text editor 46.2.

In operation, the system shown in Fig. 1, the conventional telecommunication functions according to the respective standards, in this case, GSM and GPRS, ready. In addition, the user can invoke the application programs 46 and with the useful data edit 48 or other data.

To deploy the application programs 46, the mobile device 10 accesses when switching on or at the latest when the user wants to start an application program 46, the configuration data 62 in the user module 12 to. This access is via the processing unit 50 of the user module 12, in turn, initially requesting a password entry before it releases the access. The password request is displayed on the display 34 of the mobile device 10, and the user enters the appropriate password using the keyboard 36th The correct password is checked by the processor unit 50th

Once the user has entered the correct password, then transmits the user module 12 the requested configuration data 62 (either all configuration data 62 or only provided for the respective application program 46.1, 46.2 record 62.1, 62.2) to the mobile device 10. The processor unit 32 now checks whether according to the transferred configuration data 62, 62.1, 62.2, the execution of application programs 46 or the specifically requested application program 46.1, 46.2 is permitted. If this is the case, then the program execution is enabled.

If the desired application program 46.1, 46.2 is already in the device memory 38, the program can be started easily. Otherwise, the required program or user data that may be kostenplichtig if necessary, loaded via the air interface 16 and the telecommunication network 18 from a server of an ASP provider in the device memory 38th Also this download operation must be authorized by the user module 12, which operates in this case a so-called gatekeeper. Even if the desired application program 46.1, 46.2 is included in the device memory 38, but a request via the air interface 16 at the ASP service providers can be done, firstly to transmit billing data, and secondly, if appropriate, to incorporate the present program updates in the mobile device 10th

The configuration data 62 relate to the embodiment described here is not only the basic user rights, but also preferred settings of the application programs 46, for example, preset file paths, language settings, menu configurations and other user preferences. These settings are the called application program 46 made available, so that the user always works with the program configuration desired by him. This is true even when the user connects his user module 12 with a new or different mobile device 10th

With sufficient standardization of application programming interfaces (APIs = application programming interfaces), as is to be expected in the medium term, for example by using the programming language Java® so an ASP provider customized for each user and offer independent from the used mobile device 10 application services. Moreover, a high level of safety, since all application programs 46 can be called only at presence of the user module 12 and password required. In order to prevent misuse in case of theft of the mobile device 10 in the on state (after the password input by the user), it can be provided that after an interruption of user activity for a predetermined period again a password entry is requested, as stationary, for example at screensavers for office computer is already known per se.

In the embodiment described so far has been regarded as the smallest unit for the authorization mechanism and optionally the charging process via the air interface 16, an application program 46th Depending on the programming technology employed however, a finer level of granularity can be used. It can thus configuration data 62 for example, refer to the user's authority to execute individual program functions or individual program modules, and these program functions or program modules can be individually loaded via the air interface 16 if needed. By doing so, long loading times are firstly avoided, and secondly, can be done for more accurate adjustment to the user preferences. Even with the update of application programs 46 via the air interface 16 only such program modules are preferably transmitted who over version already on the mobile device 10 is actually changed.

The 46 processed by the application programs 48 user data are stored either completely or at least partially in encrypted form in the device memory 38th For example, the user 48 provided a file system for storing user data, at the individual folders or individual drives can be selectively set for encrypted or unencrypted data storage. A similar functionality for stationary office computer without the use of a user module is already the product PGPdisk® manufacturer Network Associates, Inc., known.

When an application program wants to store 46 user data 48 in a designated area for encryption of the file system, this data is transferred from the processor unit 32 via the interface 14 to the user Lesson 12. The processor unit 50 of the user module 12 performs the encryption function 64 from using the public key contained in the key data 60 is used 70th The encrypted user data 48 is written via the interface 14 and the processor unit 32 in the device memory 38th

Access to encrypted stored user data 48 is similar. Again, the processor unit 50 of the user module 12 performs the actual decryption using the decryption function 66 and the private key 72nd However, preliminary requests the processor unit 50, a password input from the user. (Was or other biometric identification of the user correctly performed) Only when the correct password (passphrase) entered on the keyboard 36, the decryption process is released.

In the embodiment described here the encryption and decryption is performed by an asymmetric RSA method. In alternative embodiments, however, are other asymmetric or symmetric encryption and decryption process, or mixed forms thereof, including symmetric encryption using an asymmetrically encrypted key provided. With symmetrical method does not need to be made between the public key 70 and private key 72nd

Overall, it is ensured by the proposed technique described here that the encrypted payload 48 can be only read and used when the user module 12 of the authorized user is connected to the interface 14 and the user is, for example, has correctly identified by the passphrase.

In the present embodiment, the entire encryption and decryption process is performed by the processor unit 50 of the user module 12, the key data 60 never leaves the user Lesson 12. However, alternative embodiments are provided in which the encryption function 64 and the public key 70, which need not be kept secret, are passed to the mobile device 10, so that the encryption process can be performed by the generally more powerful processor unit 32 of the mobile device 10 , For the decryption process, the processing unit 32 can be used in many alternative embodiments, either, provided that, the security of the private key 72 is not compromised.

For generating the key data 60, the key generation function 68 is used in the present embodiment, which is also executed by the processor unit 50 of the user module 12th In manner known per se, this program calculates a pair of public key and private key 70 72. This measure particularly high data security is guaranteed, because the private key 72 the user module 12 does not leave even in the key generation.

The embodiment described herein is not limited to a single encrypted area for user data 48 and not to a single encryption method. For example - assuming appropriate legitimacy through the passphrase - an encrypted area be deactivated at any time and thus made freely available. Also, a re-encryption with the same or another user module 12 is possible. It can also buy several encrypted portions, optionally with different key pairs and / or in different sizes, are created and managed.

Particularly in the present embodiment, which provides for an ASP provider, the encrypted payload data 48 may be transmitted in addition to storing in the mobile device 10 via the air interface 16 to a server of the ASP provider and stored there. A synchronization of the mutually stored user data 48 can be done with each write access of an application program 46 or when you terminate a user session or at the express request of the user. The user then has one hand quick access to the locally stored user data 48 and on the other hand, regardless of the used mobile device 10, because he 48 can get with any other mobile device, the user data stored at the ASP provider.

Furthermore it can be provided in some embodiments, a key component of the network operator or the ASP provider to leave. After a successful check of the mobile device 10 in the telecommunication network 18 this key component is transmitted over the air interface 16, so that the network operator or ASP provider shares control of certain in the mobile device 10 stored user data 48 to the user.