IP Library Granted Patent US 11,706,208
Granted Patent B2
US 11,706,208 · App. 16/998,723 · Granted Jul 18, 2023

Method and apparatus for securing a remote device

Inventor: Anbalagan Elumalai (Bellevue, WA)
Assignee: T-MOBILE USA, INC.
H04L63/083H04W12/068H04W84/18
View Patent ↗
Loading inventors, assignments & file history…
Monitor This Case
Get email alerts when status or documents change.
Order Certified Copies
Most orders are placed with the USPTO same day — all within 24 business hours.
Order via The Patent Place →
Pre-filled with this patent's details
Quick Facts
Patent No.
US 11,706,208
App. No.
16/998,723
Granted
Jul 18, 2023
Kind
B2
Abstract

A system and method for security of Internet of things (IoT) devices are discussed. A user of a mobile device, such as a customer of a wireless communication network, may remotely lock an IoT device while concomitantly assigning an ad hoc password to the IoT device that can be subsequently used to unlock the device. Alternatively, an IoT device may self-lock and produce a password in response to detecting its motion. The produced password may be provided to the user of a mobile device and used later to unlock the IoT device.

Claims (56)

1. A remote server configured to communicate with a client device and an Internet of Things (IoT) device, the remote server comprising:

a processor;

a non-transitory storage medium; and

instructions stored in the non-transitory storage medium, the instructions being executable by the processor to:

in response to receiving a user command from the client device to lock the IoT device, create and assign an ad hoc password to the IoT device;

remotely change a profile on an eSIM card embedded in the IoT device by transmitting to the IoT device i) a command to reduce full functionality of the IoT device by at least partially inhibiting functionality of the IoT device and ii) the ad hoc password;

receive a response from the IoT device acknowledging that the remote device has executed the command to at least partially inhibit the functionality of the IoT device;

transmit to the IoT device i) a command to return to the full functionality of the IoT device and ii) the ad hoc password; and

receive a geolocation from the IoT device in response to the transmitting of the command to return to the full functionality of the IoT device.

2. The remote server of claim 1 , wherein the command to at least partially inhibit the functionality of the IoT device and the ad hoc password are transmitted substantially simultaneously to the remote server.

3. The remote server of claim 1 , wherein the instructions are further executable by the processor to:

receive a message from the IoT device indicating that the IoT device is moving; and

in response to receiving the message, transmit a notifying message to the client device that indicates motion of the IoT device.

4. The remote server of claim 1 , wherein the at least partially inhibiting the functionality of the IoT device comprises locking the IoT device.

5. The remote server of claim 1 , wherein the remote server comprises a portion of a wireless communication network.

6. The remote server of claim 1 , wherein the remote server comprises a portion of the Internet.

7. The remote server of claim 1 , wherein the instructions are further executable by the processor to receive from the IoT device a message that includes

an indication that the IoT device is moving,

an indication that the IoT device has self-locked in response to the moving, and

a password self-assigned by the IoT device in response to the self-locking.

8. One or more non-transitory computer-readable media storing computer-executable instructions that, when executed by a processor of a network element, cause a flow controller of the network element to perform operations comprising:

receiving, from a client device, a request to inhibit functionality of an Internet of Things (IoT) device from full functionality to a reduced functionality;

in response to receiving the request, create and assign an ad hoc password to the IoT device;

upon or after receiving the request, remotely changing a profile on an eSIM card embedded in the IoT device by transmitting to the IoT device a command to at least partially inhibit the functionality of the IoT device;

transmitting to the IoT device the ad hoc password to the IoT device, wherein the ad hoc password, if received at a subsequent time by the IoT device, allows the IoT device to return to full functionality; and

receiving a geolocation from the IoT device in response to the transmitting of the command.

9. The one or more non-transitory computer-readable media of claim 8 , wherein the instructions are further executable by the processor of the network element to cause the flow controller of the network element to perform a further operation comprising:

receiving a response from the IoT device acknowledging that the IoT device has executed the command to at least partially inhibit the functionality of the IoT device.

10. The one or more non-transitory computer-readable media of claim 8 , wherein the instructions are further executable by the processor of the network element to cause the flow controller of the network element to perform a further operation comprising:

transmitting the geolocation to the client device.

11. The one or more non-transitory computer-readable media of claim 8 , wherein the instructions are further executable by the processor of the network element to cause the flow controller of the network element to perform a further operation comprising:

determining if the IoT device is moving; and

in response to determining that the IoT device is moving, transmitting a message to the client device that indicates motion of the IoT device.

12. The one or more non-transitory computer-readable media of claim 8 , wherein the command and the ad hoc password are transmitted substantially simultaneously to the IoT device.

13. The one or more non-transitory computer-readable media of claim 8 , wherein the network element comprises a portion of a wireless communication network.

14. A computer-implemented method comprising:

receiving, from a remote server, a command to remotely change a profile on an eSIM card embedded in a remote device to reduce full functionality of the remote device by at least partially inhibiting functionality of the remote device;

receiving at a first time, from the remote server, an ad hoc password to be assigned to the remote device, wherein the ad hoc password is created in correspondence to the command;

storing the ad hoc password;

executing the command to at least partially inhibit the functionality of the remote device, wherein the ad hoc password, if received at a second or subsequent time by the remote device, allows the remote device to return to full functionality; and

transmitting a geolocation to the remote server in response to returning to full functionality.

15. The computer-implemented method of claim 14 , wherein the command and the ad hoc password are received together from the remote server.

16. The computer-implemented method of claim 14 , further comprising:

determining if the remote device is moving; and

in response to determining that the remote device is moving, transmitting a message to the remote server that indicates motion of the remote device.

17. The computer-implemented method of claim 14 , wherein the at least partially inhibiting the functionality of the remote device comprises locking the device.

18. The computer-implemented method of claim 14 , wherein the remote server comprises a portion of a wireless communication network.

19. The computer-implemented method of claim 14 , wherein the remote device comprises an Internet of Things (IoT) device.

20. The computer-implemented method of claim 14 , further comprising:

detecting motion;

self-locking the remote device in response to the detecting motion;

self-assigned a password in response to the self-locking; and

transmitting to the remote server

an indication that the IoT device is moving,

an indication that the IoT device has self-locked, and

the self-assigned password.

Assignments (1)
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Aug 20, 2020
From: ELUMALAI, ANBALAGAN
To: T-MOBILE USA, INC.
Reel/Frame 053555/0144 →
Continuity (1)
Related Publication 20220060462A1 · Feb 24, 2022