Use of certificate authority to control a device's access to services
View Patent ↗A mobile communications device having a digital certificate authenticating the device itself is proposed. A server for authenticating the device and a method of authenticating the device are also disclosed. The device comprises a transmitter, a processor, a memory and a computer readable medium. The memory includes a certificate certifying the authenticity of the mobile communications device, the certificate comprising device-specific data and a digital signature signed by an authority having control of the authenticity of the mobile communications device. The computer readable medium has computer readable instructions stored thereon that when executed configure the processor to instruct the transmitter to transmit a copy of the certificate to a service provider in response to a request to authenticate the mobile communications device with the service provider.
1. A mobile communications device comprising:
a transmitter;
a processor;
a receiver;
a memory including a certificate certifying the authenticity of the mobile communications device, the certificate including device-specific data, a unique identifier for the mobile communications device, information of a location where the mobile communications device was built, and a digital signature signed by an authority having control of the authenticity of the mobile communications device; and
a computer readable medium having computer readable instructions stored thereon that when executed configure the processor to instruct the transmitter to transmit a copy of the certificate to a service provider in response to a request to authenticate the mobile communications device with the service provider and to receive through the receiver a response from the service provider including an indication that the certificate and location are valid or an indication that the certificate and location are not valid.
2. The mobile device of claim 1 , wherein the digital signature is signed by the authority using a private key and is verifiable using a corresponding public key.
3. The mobile communications device of claim 1 , wherein the processor is configured to cause the copy of the certificate to be transmitted in response to a challenge from the service provider.
4. The mobile communications device of claim 1 , wherein the processor is further configured to encrypt the certificate prior to transmitting the certificate to the service provider.
5. The mobile communications device of claim 1 , further comprising a user interface, through which a request to access a service offered by the service provider is received, the service only being available to mobile communications devices that have been authenticated.
6. The mobile communications device of claim 1 , wherein the processor is further configured to cause the copy to be transmitted to a server controlled by the service provider.
7. The mobile communications device of claim 1 , wherein the certificate comprises a carrier on which the mobile communications device is authorized to operate.
8. The mobile communications device of claim 1 , wherein the processor is further configured to disable the mobile communications device if an attempt to alter the certificate without using the private key of the authority is detected.
9. The mobile communications device of claim 1 , wherein the memory is at least one of a read only memory (ROM), a flash memory, and a random access memory (RAM).
10. A method of authenticating a mobile communications device with a service provider, the method comprising:
the mobile communications device receiving a request to authenticate the mobile communications device with the service provider;
the mobile communications device transmitting a copy of a certificate certifying the authenticity of the mobile communications device to the service provider in response to the request, the certificate being stored in memory on the mobile communications device and including device-specific data, a unique identifier for the mobile communications device, information of a location where the mobile communications device was built and a digital signature of an authority having control of the authenticity of the mobile communications device; and
the mobile communications device receiving a response from the service provider including an indication that the certificate and location are valid or an indication that the certificate and location are not valid.
11. The method of claim 10 , wherein receiving the request comprises receiving a challenge from the service provider.
12. A server configured to authenticate mobile communication devices attempting to access services of a service provider, the server comprising:
a receiver for receiving a copy of a certificate stored on a mobile communications device attempting to access a service of the service provider, the certificate certifying the authenticity of the mobile communications device and including device-specific data, a unique identifier for the mobile communications device, information of a location where the mobile communications device was built and a digital signature of an authority having control of the authenticity of the mobile communications device;
a transmitter;
a processor; and
a memory storing computer readable instructions that when executed configure the processor to make a determination of whether or not the digital signature on the certificate is authentic in response to receiving the certificate and if the digital signature is determined to be authentic and the location is determined to be valid, causing the transmitter to transmit an indication that the mobile communications device is authentic and valid to a sender of the copy.
13. The server of claim 12 , wherein the memory comprises a public key corresponding to a private key used to generate the digital signature and the processor is configured to use the public key to determine if the digital signature is authentic.
14. The server of claim 12 , wherein the processor is further configured to cause the transmitter to transmit an indication that the mobile communications device is not authentic if the digital signature or location is determined to be invalid.
15. The server of claim 12 , comprising a database of information related to a list of mobile communications devices, the information comprising an indication of whether or not each mobile communications device listed is authorized to access a respective service.
16. The server of claim 12 , wherein receiver receives the copy of the certificate from a network element of the service provider and the processor causes the transmitter to transmit the indication that the mobile communications device is authentic to the network element.
17. The server of claim 12 , wherein the copy of certificate is received from the mobile communications device.
18. The server of claim 12 , wherein the server comprises at least one of a content server, applications server and a messaging server.