Data access method and device

Patent metadata

Field	Value
Publication number	US-9325704-B2
Application number	US-201314421630-A
Country	US
Kind code	B2
Filing date	Jun 21, 2013
Priority date	Aug 17, 2012
Publication date	Apr 26, 2016
Grant date	Apr 26, 2016

Abstract

Disclosed are a data access method and device. The method comprises: a terminal sending an authentication request to a server, the authentication request being used for requesting the server to verify whether a SIM card in the current terminal is a SIM car bound in the server by the terminal; if the terminal receives an authentication failure message, which is returned by the server, the terminal not permitting a user to access the data in the terminal, the authentication failure message being used for indicating that the SIM card in the current terminal is not the SIM card bound in the server by the terminal. The present invention can solve the technical problem in the prior art that the purpose of increasing data security is not achieved because the terminal and the SIM card are only in a binding state, and achieve the technical effect of increasing data security in the terminal.

First claim

What is claimed is:

1. A data access method, comprising:
sending, by a terminal, a server an authentication request to request the server to verify whether a Subscriber Identity Module (SIM) card in the terminal is a SIM card bound with the terminal; and
in the case the terminal receives an authentication failure message returned by the server, refusing, by the terminal, a user corresponding to the SIM card in the terminal to access data stored in the terminal, wherein the authentication failure message indicates that the SIM card in the terminal is not the SIM card bound with by the terminal;
wherein the method further comprises:
after the terminal receives the authentication failure message returned by the server, uploading, by the terminal, identification information of the terminal and identification information of the SIM card in the terminal to the server.

2. The method according to claim 1 , further comprising: after the terminal receives the authentication failure message returned by the server,
sending, by the terminal, an indication message to the server, wherein the indication message indicates the server to send the authentication failure message to a user corresponding to the terminal.

3. The method according to claim 1 , wherein the sending, by a terminal, a server an authentication, comprises at least one of the following:
when the terminal detects that the terminal itself is booting up, sending, by the terminal, the authentication request to the server;
when the terminal detects that the SIM card in the terminal is not the same as a SIM card detected last time, sending, by the terminal, the authentication request to the server; and
when the terminal detects that a current registration network is not the same as a registration network detected last time, sending, by the terminal, the authentication request to the server.

4. The method according to claim 1 , further comprising: after the terminal sends the authentication request to the server,
in the case the terminal receives an authentication success message returned by the server, allowing, by the terminal, the user corresponding to the SIM card in the terminal to access the data stored in the terminal, wherein the authentication success message indicates that the SIM card in the terminal is the SIM card bound with the terminal.

5. The method according to claim 4 , wherein the returning of the authentication success message by the server comprises:
comparing, by the server, a SIM card identification of the SIM card in the terminal carried in the authentication request, with a SIM card identification of a SIM card stored in the server which is bound with this terminal; and
in the case the two SIM card identifications are the same, sending, by the server, the authentication success message to the terminal.

6. The method according to claim 4 , further comprising: after the terminal receives the authentication success message returned by the server,
sending, by the terminal, an unbinding request message to the server, wherein the unbinding request message indicates the server to delink a binding relationship between the terminal and the bound SIM card stored in the server.

7. The method according to claim 4 , further comprising: after the terminal receives the authentication success message returned by the server,
receiving, by the terminal, a data deleting request sent by the server; and
In response to the data deleting request, deleting, by the terminal, the data stored in the terminal.

8. A data access device located in a terminal, comprising:
a first sending unit, configured to send a server an authentication request to request the server to verify whether a Subscriber Identity Module (SIM) card in the terminal is a SIM card bound with the terminal; and
a prohibition unit, configured to refuse, in the case the terminal receives an authentication failure message returned by the server, a user corresponding to the SIM card in the terminal to access data stored in the terminal, wherein the authentication failure message indicates that the SIM card in the terminal is not the SIM card bound with the terminal;
wherein the first sending unit is further configured to upload identification information of the terminal and identification information of the SIM card in the terminal to the server after the terminal receives the authentication failure message returned by the server.

9. The device according to claim 8 , further comprising:
a second sending unit, configured to send, after the terminal receives the authentication failure message returned by the server, an indication message to the server, wherein the indication message indicates the server to send the authentication failure message to a user corresponding to the terminal.

10. The method according to claim 2 , wherein the sending, by a terminal, a server an authentication, comprises at least one of the following:
when the terminal detects that the terminal itself is booting up, sending, by the terminal, the authentication request to the server;
when the terminal detects that the SIM card in the terminal is not the same as a SIM card detected last time, sending, by the terminal, the authentication request to the server; and
when the terminal detects that a current registration network is not the same as a registration network detected last time, sending, by the terminal, the authentication request to the server.

Assignees

• Zte Corp

Inventors

• Wang Yanping
• Xue Zitao

Classifications

• H04W88/18

  Service support devices; Network management devices · CPC title

• H04W8/183

  Processing at user equipment or user record carrier · CPC title

• H04L63/0853 Primary

  using an additional device, e.g. smartcard, SIM or a different communication terminal (cryptographic mechanisms or cryptographic arrangements for entity authentication involving additional secure or trusted devices H04L9/3234) · CPC title

• H04W12/06

  Authentication · CPC title

• H04W88/02

  Terminal devices · CPC title