Secure remote user device unlock for carrier locked user devices

Patent metadata

Field	Value
Publication number	US-9813399-B2
Application number	US-201514856742-A
Country	US
Kind code	B2
Filing date	Sep 17, 2015
Priority date	Sep 17, 2015
Publication date	Nov 7, 2017
Grant date	Nov 7, 2017

Abstract

System and method of unlocking a user device. A carrier unlock request is received for a user device that may have an unlock application that has been deactivated or flashed. One or more verifications are performed to determine whether the user device is eligible for the carrier unlock requested. Upon determining that the user device is eligible for the carrier unlock, an unlock command is sent to either the user device or an alternate computing device that initiated the unlock request. The unlock command is operative to disable a comparison of a device carrier code of the user device to a subscriber identity module (SIM) carrier code stored in a SIM card of the user device. In various embodiments, the unlock command may be sent either directly to the modem of the user device via USSD or as a QR code to the alternate computing device.

First claim

What is claimed is:

1. An integrity server comprising:
a processor;
a network interface coupled to the processor configured to enable communications via a communication network;
a storage device for content and programming;
a program stored in the storage device, wherein execution of the program by the processor configures the integrity server to perform acts comprising:
receiving a carrier unlock request from a user device having an unlock application that has been deactivated or flashed;
performing one or more verifications to determine whether the user device is eligible for the carrier unlock requested; and
sending an unlock command directly to a modem of the user device upon determining that the user device is eligible for the carrier unlock, wherein the unlock command is operative to disable a comparison of a device carrier code of the user device to a subscriber identity module (SIM) carrier code stored in a SIM card of the user device.

2. The integrity server of claim 1 , wherein the unlock request from the user device and the unlock command are via unstructured supplementary service data (USSD) protocol.

3. The integrity server of claim 1 , wherein execution of the program further configures the integrity server to perform acts comprising sending an unlock error message to the user device upon determining that the user device is ineligible for the carrier unlock.

4. The integrity server of claim 1 , wherein:
the carrier unlock request includes an encrypted modem key of the modem of the user device, which is integrity protected by a trusted key of a trusted environment of the user device; and
execution of the program further configures the integrity server to perform acts comprising decrypting the encrypted modem key into a decrypted modem key in response to a validation of the trusted key as belonging to the user device.

5. The integrity server of claim 4 , wherein the validation of the trusted key is performed by a trusted third-party.

6. The integrity server of claim 4 , wherein execution of the program further configures the integrity server to perform acts comprising using the decrypted modem key to validate the carrier unlock request that is integrity protected by the trusted key.

7. The integrity server of claim 4 , wherein execution of the program further configures the integrity server to perform acts comprising providing integrity protection to the unlock command and a modem data packet in the unlock command via the decrypted modem key prior to the sending of the unlock command directly to the modem of the user device.

8. The integrity server of claim 7 , wherein the modem data packet includes information that is operative to permanently disable a comparison of the device carrier code to the SIM carrier code when the unlock scenario includes a permanent carrier unlock of the user device, or temporarily disable the comparison of the device carrier code to the SIM carrier code for a predetermined period of time when the unlock scenario includes a temporary carrier unlock of the user device.

9. The integrity server of claim 1 , wherein the unlock command is specific for the user device in that the unlock command is not operative on other devices.

10. The integrity server of claim 1 , wherein an unlock scenario is based on factors that include at least one of: (i) whether the carrier unlock is a permanent or a temporary carrier unlock of the user device, (ii) a geographical region specified by the carrier unlock, and (iii) an unlock time duration when the carrier unlock is a temporary carrier unlock.

11. An integrity server comprising:
a processor;
a network interface coupled to the processor configured to enable communications via a communication network;
a storage device for content and programming;
a program stored in the storage device, wherein execution of the program by the processor configures the integrity server to perform acts comprising:
receiving a carrier unlock request from an alternate computing device for a user device having an unlock application that has been deactivated or flashed;
performing one or more verifications to determine whether the user device is eligible for the carrier unlock requested; and
sending an unlock command to the alternate computing device for the user device, upon determining that the user device is eligible for the carrier unlock.

12. The integrity server of claim 11 , wherein the unlock command is in the form of a quick response (QR) code.

13. The integrity server of claim 12 , wherein the QR unlock command is specific for the user device in that it is not operative to unlock other devices.

14. The integrity server of claim 12 , wherein the unlock command is configured to be at least one of (i) displayed on a user interface of the alternate computing device, and (ii) printed by a printer associated with the alternate computing device, such that it can be scanned by the user device.

15. The integrity server of claim 11 , wherein the unlock command is operative to disable a comparison of a device carrier code of the user device to a subscriber identity module (SIM) carrier code stored in a SIM card of the user device.

16. The integrity server of claim 11 , wherein the unlock request from the alternate computing device is received via a web page of the integrity server.

17. The integrity server of claim 11 , further comprising sending an unlock error message to the alternate computing device upon determining that the user device is ineligible for the carrier unlock.

18. The integrity server of claim 11 , wherein execution of the program further configures the integrity server to perform acts comprising providing integrity protection to the unlock command and a modem data packet in the unlock command prior to the sending of the unlock command in QR code to the user device via the alternate computing device.

19. The integrity server of claim 18 , wherein the modem data packet includes information that is operative to permanently disable a comparison of the device carrier code to the SIM carrier code when an unlock scenario includes a permanent carrier unlock of the user device, or temporarily disable the comparison of the device carrier code to the SIM carrier code for a predetermined period of time when the unlock scenario includes a temporary carrier unlock of the user device.

20. The integrity server of claim 11 , wherein the unlock scenario is based on factors that include at least one of: (i) whether the carrier unlock is a permanent carrier unlock of the user device or a temporary carrier unlock of the user device, (ii) a geographical region specified by the carrier unlock, and (iii) an unlock time duration when the carrier unlock is a temporary carrier unlock.

21. An integrity server comprising:
a processor;
a network interface coupled to the processor configured to enable communications via a communication network;
a storage device for content and programming;
a program stored in the storage device, wherein execution of the program by the processor configures the integrity server to perform acts comprising:
receiving a carrier unlock request;
determining a source of the unlock request;
upon determining that the source of the unlock request is a user device:
upon determining that the unlock request is not valid, sending an indication to the user device that the unlock request is not valid; and
upon determining that the unlock request is valid, sending an unlock command directly to a modem of the user device;

u

Assignees

• T Mobile Usa Inc

Inventors

• Velusamy Senthil Kumar Mulluppadi

Classifications

• H04L67/02

  based on web technology, e.g. hypertext transfer protocol [HTTP] · CPC title

• H04L63/08 Primary

  for authentication of entities (cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32) · CPC title

• H04W12/04

  Key management, e.g. using generic bootstrapping architecture [GBA] · CPC title

• H04W8/22 Primary

  Processing or transfer of terminal data, e.g. status or physical capabilities · CPC title

• H04W12/08

  Access security · CPC title