Secure lock for mobile device

1. A telecommunication device comprising:

one or more processors; and

a memory coupled to the one or more processors, and having at least a device operating system (OS) and a secure lock component,

wherein the secure lock component is operable by the one or more processors to:

detect a device access attempt during a boot sequence of the telecommunication device, wherein each of multiple layers in a boot stack of the boot sequence employs a cryptographic lock that is configured to be unlocked with a first security key;

initiate a cryptographic validation operation when a second security key is encountered as a part of the device access attempt; and

enable access to at least one resource of the telecommunication device in response to utilizing the first security key to determine that the second security key is valid during the cryptographic validation operation, or

deny access to the at least one resource of the telecommunication device in response to utilizing the first security key to determine that the second security key is not valid during the cryptographic validation operation.

2. The telecommunication device of claim 1 , wherein the device access attempt is a root-level device access attempt.

3. The telecommunication device of claim 1 , wherein the secure lock component comprises a secure on chip (SoC) boot loader that is configured to control the boot sequence, and wherein the boot sequence includes at least one boot layer that is bootable by the SoC bootloader to initialize the device OS.

4. The telecommunication device of claim 1 , wherein the device access attempt is a flash attempt by software, and wherein the software of the flash attempt is an unauthorized device OS or third party application.

5. The telecommunication device of claim 4 , wherein the secure lock component is further operable by the one or more processors to deny access to the at least one resource stored in the memory, in response to detecting the flash attempt.

6. The telecommunication device of claim 1 , wherein the secure lock component is further operable by the one or more processors to detect a plurality of unauthorized user access attempts at the telecommunication device, and wherein at least one of the plurality of unauthorized user access attempts is associated with an invalid unlock code that is received at an interface of the telecommunication device.

7. The telecommunication device of claim 1 , wherein the secure lock component is further operable by the one or more processors to:

detect an unauthorized software image in, or being flashed to, the memory of the telecommunication device; and

brick access to the telecommunication device in response to detecting the unauthorized software image.

8. A method comprising:

receiving, at a telecommunication device, a cryptographic identifier as a part of a root-level access attempt, wherein the root-level access attempt is an attempt to access at least one resource of the telecommunication device requiring root-level access;

determining a validity of the cryptographic identifier; and

authenticating root-level access to the at least one resource of the telecommunication device in response to determining the validity of cryptographic identifier,

wherein the root-level access attempt occurs during a secure boot sequence of the telecommunication device, and wherein each of multiple layers in a boot stack of the secure boot sequence employs a cryptographic lock that is configured to be unlocked with the cryptographic identifier.

9. The method of claim 8 , wherein the cryptographic identifier of the root-level access attempt is associated with a security key that is one of:

i) a symmetric cryptographic key,

ii) an asymmetric cryptographic public/private key, and

iii) a cryptographic hash key.

10. The method of claim 8 , further comprising bricking access to the telecommunication device in response to detecting a predetermined number of failed user access attempts.

11. A non-transitory computer storage device with a stored computer-executable program, which, when executed by one or more processors of a telecommunication device, performs operations comprising:

initiating an authentication operation in response to identifying a first cryptographic key to be a part of a device access attempted during a boot sequence of the telecommunication device, wherein each of multiple layers in a boot stack of the boot sequence employs a cryptographic lock that is configured to be unlocked with a second cryptographic key; and

enabling access to at least one resource of the telecommunication device in response to utilizing the second cryptograph key to determinate that the first cryptographic key is valid during the authentication operation, or

denying access to the at least one resource of the telecommunication device in response to utilizing the second cryptograph key to determinate that the first cryptographic key is not valid during the authentication operation.

12. The non-transitory computer storage device of claim 11 , wherein the device access attempt is an unauthorized root-level device access attempt or software flash attempt.

13. The non-transitory computer storage device of claim 11 , wherein the operations further comprise detecting a plurality of unauthorized user access attempts at the telecommunication device, and wherein at least one of the plurality of unauthorized user access attempts is associated with an invalid unlock code that is received at the telecommunication device.

14. The non-transitory computer storage device of claim 11 , wherein the operations further comprise:

detecting an unauthorized software image in, or being flashed to, a memory of the telecommunication device; and

bricking access to the telecommunication device in response to detecting the unauthorized software image.

15. The non-transitory computer storage device of claim 14 , wherein the operations further comprise generating a notification indicating a bricked or a locked status of the telecommunication device, wherein the notification includes an option for curing the bricked or locked status of the telecommunication device.