Device validation, distress indication, and remediation

Patent metadata

Field	Value
Publication number	US-9652320-B2
Application number	US-201414570301-A
Country	US
Kind code	B2
Filing date	Dec 15, 2014
Priority date	Nov 5, 2010
Publication date	May 16, 2017
Grant date	May 16, 2017

Abstract

A wireless communications device may be configured to perform integrity checking and interrogation with a network entity to isolate a portion of a failed component on the wireless network device for remediation. Once an integrity failure is determined on a component of the device, the device may identify a functionality associated with the component and indicate the failed functionality to the network entity. Both the wireless network device and the network entity may identify the failed functionality and/or failed component using a component-to-functionality map. After receiving an indication of an integrity failure at the device, the network entity may determine that one or more additional iterations of integrity checking may be performed at the device to narrow the scope of the integrity failure on the failed component. Once the integrity failure is isolated, the network entity may remediate a portion of the failed component on the wireless communications device.

First claim

What is claimed:

1. A wireless device comprising a processor, a memory, and communication circuitry, the wireless device configured to connect to a communications network via the communication circuitry, the wireless device including computer-executable instructions stored in the memory of the wireless device which, when executed by the processor of the wireless device, perform operations comprising:
performing a first integrity check on a component of the wireless device;
determining that the component has failed the first integrity check;
in response to determining that the component has failed the first integrity check, preventing a release of a key used for attachment to the communications network;
determining a functionality that corresponds to the failed component; and
sending, to a network entity, an indication of the functionality that corresponds to the failed component.

2. The wireless device claim 1 , the operations further comprising:
storing a component-to-functionality map; and
determining the functionality that corresponds to the failed component based on the component-to-functionality map.

3. The wireless device of claim 1 , the operations further comprising:
performing a second integrity check on the failed component to isolate a portion of the failed component for remediation by a network entity.

4. The wireless device of claim 3 , the operations further comprising:
sending, to a network entity, an indication of the functionality that corresponds to the failed component, the indication comprising an alarm configured to trigger a remote update procedure with the network entity to replace the portion of the failed component.

5. The wireless device of claim 3 , the operations further comprising:
receiving a request from the network entity to perform the second integrity check on the failed component to determine the portion of the failed component that caused the component to fail the first integrity check.

6. The wireless device of claim 3 , the operations further comprising:
receiving a replacement component associated with the portion of the failed component; and
replacing the portion of the failed component with the replacement component.

7. The wireless device of claim 3 , the operations further comprising:
performing one or more iterations of the second integrity check on the portion of the failed component to further isolate the portion of the failed component for remediation by the network entity.

8. The wireless device of claim 7 , the operations further comprising:
sending, to a network entity, an indication of a functionality that corresponds to the portion of the failed component that caused the component to fail the first integrity check; and
receiving a request from the network entity to perform the one or more iterations of the second integrity check on the portion of the failed component.

9. The wireless device of claim 1 , wherein determining that the component has failed the first integrity check further comprises:
determining an integrity measurement associated with the component;
comparing the integrity measurement with a trusted reference value associated with the component; and
determining that the integrity measurement does not match the trusted reference value.

10. In a system that comprises a wireless device and a network entity configured to communicate with each other directly or via a communications network, a method performed by the wireless device, the method comprising:
performing a first integrity check on a component of the wireless device;
determining that the component has failed the first integrity check; and
in response to determining that the component has failed the first integrity check, preventing a release of a key used for attachment to the communications network;
determining a functionality that corresponds to the failed component; and
sending, to the network entity, an indication of the functionality that corresponds to the failed component.

11. The method of claim 10 , the method further comprising:
storing a component-to-functionality map; and
determining the functionality that corresponds to the failed component based on the component-to-functionality map.

12. The method of claim 10 , the method further comprising:
performing a second integrity check on the failed component to isolate a portion of the failed component for remediation by a network entity.

13. The method of claim 12 , the method further comprising:
sending, to the network entity, an indication of the functionality that corresponds to the failed component, the indication comprising an alarm configured to trigger a remote update procedure with the network entity to replace the portion of the failed component.

14. The method of claim 12 , the method further comprising:
receiving a request from the network entity to perform the second integrity check on the failed component to determine the portion of the failed component that caused the component to fail the first integrity check.

15. The method of claim 12 , the method further comprising:
receiving a replacement component associated with the portion of the failed component; and
replacing the portion of the failed component with the replacement component.

16. The method of claim 12 , the method further comprising:
performing one or more iterations of the second integrity check on the portion of the failed component to further isolate the portion of the failed component for remediation by the network entity.

17. The method of claim 16 , the method further comprising:
sending, to the network entity, an indication of a functionality that corresponds to the portion of the failed component that caused the component to fail the first integrity check; and
receiving a request from the network entity to perform the one or more iterations of the second integrity check on the portion of the failed component.

18. The method of claim 10 , wherein determining that the component has failed the first integrity check further comprises:
determining an integrity measurement associated with the component;
comparing the integrity measurement with a trusted reference value associated with the component; and
determining that the integrity measurement does not match the trusted reference value.

19. A method comprising:
performing, in a wireless communication device, an integrity check on at least one component associated with the wireless communication device;
determining whether the at least one component has failed the integrity check;
when the at least one component is determined to have failed the integrity check, determining functionalities that correspond to the at least one failed component;
accessing a policy, at the wireless communication device, that maps the functionalities determined to correspond to the at least one failed component to at least one capability of the wireless communication device; and
enforcing a policy on the wireless communication device based on the determined at least one capability.

20. The method of claim 19 , wherein the capability is a platform capability.

21. The method of claim 19 , wherein a component-to-functionality map is used to determine the functionalities of a component.

22. The method of claim 21 , wherein at least one functionality from the component-to-functionality map is used to determine the at least one capability.

23. The method of claim 22 , wherein the capability corresponds to

Assignees

• Interdigital Patent Holdings Inc

Inventors

• Shah Yogendra C
• Case Lawrence
• Howry Dolores F
• Cha Inhyok
• Leicher Andreas
• Schmidt Andreas

Classifications

• G06F21/10 Primary

  Protecting distributed programs or content, e.g. vending or licensing of copyrighted material (protection in video systems or pay television H04N7/16) {; Digital rights management [DRM]} · CPC title

• H04M1/24

  Arrangements for testing · CPC title

• G06F2221/2103

  Challenge-response · CPC title

• G06F11/08 Primary

  Error detection or correction by redundancy in data representation, e.g. by using checking codes · CPC title

• H04W8/22

  Processing or transfer of terminal data, e.g. status or physical capabilities · CPC title