METHOD AND DEVICE FOR CONTROLLING ACCESS TO MOBILE TELECOMMUNICATIONS NETWORKS

Abstract

To control access by any given mobile terminal to a mobile telecommunications network, a smartcard (i.e. a SIM) is arranged to include a list of device identifiers corresponding to one or more mobile terminals together with an indication of their respective access categories (i.e. black-list, grey-list or white-list). This list is constructed from an updated list of identifiers of mobile devices into which the smartcard has been inserted. This may be enhanced with a limited number of generic excluded identifiers. The smartcard thus maintains a local database of banned devices and/or devices that need to be monitored by the network.

Description

FIELD OF THE INVENTION

The invention relates to a method for controlling access to a mobile telecommunications network by specific terminals.

BACKGROUND TO THE INVENTION

Where a mobile phone has been reported to a mobile network operator as stolen or missing, future access to that network (and potentially to other networks, where there is an agreement to share such information) can be prevented. To do this, a database, often part of the home location register (HLR) in the core network, is deployed. Access is denied, allowed or restricted to any given mobile phone depending upon the entry for that phone, if any, within that database. Such databases are generally referred to as equipment identity registers (EIR).

EIRs are typically arranged to hold records for three classes of mobile terminal; the classes are conventionally termed “black”, “grey” and “white”.

When a mobile requests services from the network, the signaling required to set up the required connection includes a message from the equipment containing a unique equipment identifier such as the IMEI (International Mobile Equipment Identity).

It is the IMEI that is stored in the relevant category of the EIR. Thus, in establishing a service, the IMEI may be checked against the EIR, to assess which equipment category the mobile phone falls into. A “black” device is one that has been reported stolen or whose operation on the network is otherwise determined to be undesirable for the network operator (for instance it may be unauthorized or in some way defective: it would be detrimental for network operation to allow a device that has malfunctioning power control). Black-listed mobiles will denied access to the network.

By contrast, grey mobiles would generally be allowed to use the network but they may be treated differently (their attempts to access the network might be logged and stored in a log file).

As might be expected, “white” mobiles are those that comply with network operator requirements.

Conventional EIRs are thus designed to blacklist individual stolen handsets. Blacklisting whole classes of devices (for example counterfeit, defective batch etc.) or specific terminals using compromised or undesirable versions of software (particularly operating system software) is not trivial and may be impractical.

Furthermore, EIRs are ineffective when the handset connects over non-mobile networks, or to networks which don't have EIRs, or don't have the IMEI on their black-list.

It has also been possible to work around black-listing by altering the IMEI carried by the equipment.

In some extreme cases, badly built terminals have the potential to damage the mobile telecommunications networks even before an IMEI is presented.

It is therefore an object of the invention to obviate or at least mitigate the aforementioned problems.

SUMMARY OF THE INVENTION

In accordance with an aspect of the invention, there is provided a method for controlling access to a mobile telecommunications network by specific terminals, the method comprising, in a smartcard for insertion in a mobile terminal:

providing an internal pattern that lists device identifiers corresponding to one or more mobile terminals, said internal pattern including an indication of the access class for each of the listed device identifiers,

determining identification information unique to a mobile terminal, said information including a device identifier and software version data,

comparing the determined identification information with the internal pattern, and

permitting access to a mobile telecommunications network by the mobile terminal in accordance with the results of the comparison.

The smartcard is preferably a SIM card.

As a result of the present invention, SIMs themselves are able to refuse to work in a “bad” device (e.g. one with faulty radio or software version, known malware problems etc.).

In accordance with a further aspect of the invention, there is provided a smartcard implementing the method described above.

In combination with the network based EIR, many more undesirable uses of mobile telecommunications equipment may be prevented with limited alteration of network components.

DETAILED DESCRIPTION

In the present invention, a SIM uses a SIM application toolkit command (“Provide Local Information”, see 3GPP TS 11.14) to determine the full terminal IMEI including software version, and compare this with an internal pattern.

The internal pattern is a list of IMEIs with which the SIM has initially been provided or to which it has subsequently been associated (the category of those latter numbers being determined by the network and then the SIM list updated).

There can be a mixture of black, white and grey-listing. If “white”, then the SIM works as usual. If “black” then the SIM shuts down and the terminal will then show an error message (e.g. “Insert valid SIM”) and typically refuse to connect to any network. If “grey” then the SIM allows a temporary connection so it can report to a mobile network and gain further information. If there is no info within a pre-set time window, it treats as “black”.

One clear advantage is that the SIM won't need an EIR with the number of entries typical for a whole network. Instead the SIM-based list will be effective with only a limited set of rules covering terminals it has been inserted into so far and a few “globally bad” patterns (like all zero or other constant IMEIs). These rules can of course be updated by the network. In certain circumstances, the SIM could itself be barred.

In certain embodiments a terminal may be grey-listed (or even black-listed) automatically if the terminal does not properly support SIM toolkit.

Alternatively or additionally, a secure channel or USB “plug and play” behaviour (over high speed interface) may be used to identify and/or authenticate the terminal. Failure to build the secure channel (i.e. terminal can't be authenticated) could then result in grey-list or black-list treatment.

In a further embodiment, the SIM reports directly to the terminal itself if the terminal has been stolen, or is “bad” in some other catastrophic way, (e.g. custom error message, which could be tailored to the terminal type). The terminal could then shut down or go into a safe mode requiring authorized unlock, regardless of whether the SIM reporting the theft is then removed.

Using permutations or combinations of the above embodiments with or without the cooperation of the network based EIR, may prevent catastrophically bad terminals from even attempting to connect to a network (and hence causing damage).

Claims

1-8. (canceled)

9. A method for controlling access to a mobile telecommunications network by specific terminals, the method comprising, in a smartcard for insertion in a mobile terminal: providing an internal pattern that lists device identifiers corresponding to one or more mobile terminals, said internal pattern including an indication of the access class for each of the listed device identifiers,determining identification information of a mobile terminal, said identification information including a device identifier,comparing the determined identification information with the internal pattern, andpermitting access to a mobile telecommunications network by the mobile terminal in accordance with the results of the comparison.

10. A method as claimed in claim 9, wherein the identification information further includes a software version data.

11. A method as claimed in claim 9, wherein the identification information is unique to the mobile terminal.

12. A method as claimed in claim 9, wherein the device identifier is an IMEI number and the internal pattern is a lookup table of IMEIs with which the SIM has initially been provided or to which it has subsequently been associated with respective corresponding access class indication.

13. A method as claimed in claim 9, wherein access is denied automatically if the mobile terminal does not properly support SIM toolkit.

14. A method as claimed in claim 9, wherein a secure channel or USB “plug and play” behaviour is used to identify and/or authenticate the mobile terminal and wherein failure to build the secure channel results in the recordal of a change of the indication of the access class for the mobile terminal.

15. A method as claimed in claim 9, wherein the SIM reports directly to the terminal itself if the terminal enters an undesirable state.

16. A method as claimed in claim 9, wherein the mobile terminal is shut down or enters a safe mode requiring authorized unlock where the comparison step indicates such behaviour.

17. A method as claimed in claim 9, wherein the initial contents of the internal pattern are determined by the network and the internal pattern is subsequently updated when the smartcard is inserted in the mobile terminal.

18. A smartcard for controlling access to a mobile telecommunications network by specific terminals, the smartcard implementing the method as claimed in claim 9.