WO2009047167A1 - Arrangement for securing mobile devices and method for this - Google Patents

Abstract

The invention proposes an arrangement for securing mobile devices having means for supplying a list of device identifiers, which list contains device identifiers of devices which are registered as to be locked, having comparison means for comparing an identifier of the mobile device with the list of device identifiers, and having means for locking a function of the device if correspondence is established between the identifier of the mobile device and the list of device identifiers, and a method for securing mobile devices, wherein a list (21) of device identifiers is supplied to a mobile device (1), this list (21) containing device identifiers of devices which are registered as to be locked, wherein an identifier of the mobile device (1) is compared with the list of device identifiers (21), and wherein a function of the device (1) is locked when the comparison shows correspondence between the identifier of the mobile device (1) and the list (21) of device identifiers. The invention having the features of the independent patent claims has the advantage that even devices which are stolen with the full complement of accessories can be locked. Theft of a device protected in a manner according to the invention is unattractive to a potential thief since he therefore has to expect the device to lock at any time as soon as it downloads data or establishes a communication connection outside the device. Furthermore, it is not necessary to enter a release code, as is required in the case of the prior art.

Description

 description

title

Arrangement for securing mobile devices and method thereto

State of the art

The invention is based on an arrangement and a method according to the preamble of the independent claims.

From EP 0387 581 Bl a system for securing vehicles and components installed in vehicles is known, in which via an input unit, a code can be entered, which code is transmitted to a central office and there compared with a list of codes, according to Determination of a match of the transmitted with one of in the

Centralized codes are transmitted from the central station to the vehicle or vehicle-side component, which is then enabled for operation in response to the release signal.

Since such components, such as car radio or navigation devices for subsequent vehicle installation or portable devices for example, a temporary use in the vehicle, usually sold with complete accessories and also the information about a release code in a common outer packaging, this approach takes place in the theft of such a device not including outer packaging. Advantages of the invention

The invention with the features of the independent claims has the advantage that even devices that are stolen along with complete accessories can be locked. For a potential

Thief is the theft of a protected device according to the invention unattractive, since he must always expect that the device is locked as soon as he reloads data or establishes a communication connection to the outside of the device. Furthermore, the required in the prior art input of an activation code is unnecessary.

For this purpose, a device for securing mobile devices has means for supplying a list of device identifications, which list contains device identifications of devices registered as to be blocked, via comparison means for comparing a identifier of the mobile device with the list of

Device identifiers and means for disabling a function of the device in the event that the identity of the mobile device matches the list of device identifiers. The identifier of the mobile device, which is compared with the list of device identifiers, can, for example, a manufacturer-uniquely assigned to a device and stored in the device

Serial number. The arrangement may in particular be part of the mobile device and executed in its operating program as a program routine, which is processed, for example, each time the device is started up.

Advantageously, the list of device identifiers for blocking devices can be read in via a removable data medium or via a

Communication interface are loaded.

In particular, periodic data updates are suitable for supplying the list of device identifications to devices to be blocked. Such data updates are, for example, in navigation systems, in particular

Vehicle navigation systems for use in motor vehicles, but also other navigation systems useful because traffic routes be changed by new buildings, conversions and the like, for example, replacement of Kreunzungen by roundabouts, new investment of bypass roads, etc. over time. A correct route calculation and route guidance requires regularly updated map data. Knowing this, it is obvious for the user of such a device to periodically update its map database, also updating the list of device IDs for devices to be blocked.

drawings

Embodiments of the invention are illustrated in the figure and are explained in more detail below. The same reference numerals designate the same or equivalent elements.

The figure shows a block diagram of the invention essential part of the inventive arrangement for carrying out the method according to the invention.

Description of the embodiments

The figure shows a mobile electronic device 1, which is protected by the inventive arrangement and the inventive method. The device 1 can, for example, a car radio,

Be Fahrzeugnavigations- or vehicle multimedia device, which is installed in a, preferably standardized, drive bay in a center console of a vehicle. The device 1 may alternatively be, for example, a portable device, such as a portable navigation device, also referred to as PNA (= Personal Navigation Assistant), or a mobile phone or the like. Further

Applications are within the scope of the invention. This device 1 is protected by an arrangement and methods described below.

It is assumed that a device 1 is assigned an identifier uniquely. This uniquely assigned identifier can be, for example, a serial number of the device assigned by the device manufacturer or the like. This serial number, or general identifier, is preferably stored in a memory 12 of the device 1. Preferably, the identifier is tamper-proof, secured against exchange and preferably stored in coded and not readily readable form. For example, the

Serial number be stored in a read-only memory 12 of a microprocessor 11 of the device 11, wherein the microprocessor 11 is soldered to a printed circuit board of the device 1 and thus removable and replaceable only with considerable effort.

The device 1 further comprises means for supplying a list of device identifiers, this list containing device identifiers of devices which are to be disabled for operation. The means for supplying a list of device identifications can be formed by a reading device 14 for exchangeable storage media, that is to say a chip card reader 14 for reading chip cards 16 which can be inserted in them, for example according to ISO 7816, SD, MMC, Compact Flash or a comparable standard. The list is then, preferably in addition to other user data, stored on the smart card 16 and is read by the card reader 14, controlled by the processor 11, from the smart card. The reading device may alternatively also include, for example

Drive for reading optical or magnetic storage media 17, such as Compact Disc (CD), Digital Versatile Disc (DVD), Blue Ray Disc or the like, the list is stored on the appropriate storage medium, preferably among other payload, and read from the storage medium becomes. Preferably, the processor 11 controls the reading of the list from

Device identifiers from the storage medium 16, 17 always at a commissioning of the device 1 via its power switch 131 to a control unit 13. Alternatively, the reading of the list of device identifiers, for example, each at a first access to the data carrier 16, 17 for the purpose of reading in user data in a working memory 18 of the device. For example, in known navigation systems, be it for fixed installation in vehicles, be it for mobile or temporary use in the vehicle, when starting the navigation function usually map data of the interchangeable

Disk loaded into the memory 18. Since map data becomes obsolete over time, it makes sense to obtain updated map data in such navigation devices. Along with the map data, list 21 of device identifiers can also be updated.

Alternatively or additionally, the means for supplying a list of device identifiers may also include a communication interface 15, for example a mobile radio interface according to a known GSM, GPRS or UMTS standard or the like. In this case, the device 1 occurs via the communication interface 15 with a remote station 2 via the second communication interface 22 in connection. In this context, a list 21 of device identifications stored at the remote station 2 can be loaded into the main memory 18 of the device 1 via the communication interfaces 22 and 15. In the case of a mobile radio interface, the transmission, for example, in the course of logging into the mobile network from

Radio network operators are initiated. In the case of, for example, a WLAN, Bluetooth or similar communication interface 15, the list of device identifiers can be transmitted to the device 1, for example, when a connection between communication interface 15 and WLAN hotspot 22 is established by its operator 2.

After transmission of the list 21 of device identifiers to the device 1, the processor 11 compares the memory 12 stored in the identifier of the device 1 with the obtained list of device identifiers. If the processor 11 detects a match, it blocks further commissioning or another

Use of the device 1. Alternatively, it can also be provided that in the device 1 only certain functions are blocked, in a mobile phone, for example, all existing functions except for the emergency call function. The database with the list 21 of device identifiers, for example, maintained by the device manufacturer 2 and constantly updated. To maintain and update the list, stolen devices or the serial numbers of these devices are reported to the manufacturer. Preferably, it is provided that the detector thereby a proof on the property of the stolen reported

Device must provide. This can be done by adding a police theft message or by a special number, such as a PIN from the stolen device's records. This can be protected by a scratch pad similar to the secret numbers for mobile phone or bank cards. Thus, the number remains secret in case of resale.

In the case of theft of the device with outer packaging and accessories, for example, in the trade or during transport from the manufacturer to the dealer, the serial number or general identifier of the device, for example, in shipping documents of the manufacturer or a

Store management system of the dealer and is thus available for a message to the administrator of the blacklist. In the event that the device is stolen from the end user with all or at least the documents containing the device code or serial numbers, the identifier or serial number for a theft message may be noted on the invoice or on the delivery note, for example.

The manufacturer or administrator of the list of device identifiers enters the serial number in a database, which is then distributed to the mobile network operators, operators of WLAN hotspots, etc. and deposited there.

It is anticipated that there will be an increase in the future connection of mobile devices, such as navigation devices, with Internet services. For example, the download of POIs (points of interest, such as restaurants, gas stations, train stations and other Infratstruktur- and other facilities) from Internet databases or the loading of addresses, for example, a specific one here Restaurants from the Internet intended for destination input on the navigation system or the like. For this case, the list can also from device identifiers to all Internet servers providing such information or general data providers for automatic download along with the desired information.

Furthermore, the list can also be applied by the manufacturer to data carriers with updated data, such as map data for navigation systems or operating program data for program updates, so that this updated list of device identifiers passes into the device 1 via the reading device 14 when the data carriers 16, 17 are read.

The invention is therefore particularly suitable for devices which are supplied with information from external sources at short and / or regular intervals, ie in particular devices which have a communication interface and for the purpose of communication with a communication network of an operator, for example mobile radio, Internet via WLAN Hotspot, connect Bluetooth and register there. In the course of connection setup or registration, the transmission of the list of device identifiers to the device 1 may be mandatory. Alternatively, the invention is particularly suitable for devices to which software or data updates are routinely supplied, such as navigation systems to which updated map data is supplied and the like.

Above, it was regularly assumed that the arrangement according to the invention is part of the device 1 and, in particular, implemented as software in the device 1. However, this is not mandatory. The arrangement may also be an external arrangement relative to the device 1 to which the device is connected.

In the event that a stolen device 1 comes back into the hands of the owner, it is further provided that the identifier of this device 1 from the

List 21 of device IDs is deleted. An authentication can be done as in the case of blocking the number. For message as for the Distance from the database or the list of device identifiers can be charged.

When removing from the list of stolen devices, the owner can be told if certain data is blocked for his device. These data are either to be avoided or the device must be provided with a new serial number. The data provided online does not include the

Problems. Even after unlocking the device it will continue

Circulating media (CD / DVD, ..) that would lock the device in use again. In this case, the owner of the device can have a

List of data carriers that he has to avoid.

Instead of deactivating the device immediately upon detection, alternatively, after a random period of time, a necessary device service can be pointed out and the device then only be locked. With a little luck, the thief or the person who has the device at the time will contact the service. There is then the possibility to return it to the rightful owner or to clarify the theft.

The mechanism can, however, be used in principle with all devices that regularly receive data from outside the device. For example, MP3 players for which music files are downloaded from the Internet and played on the player, so-called TMC boxes, ie radio receivers for receiving digitally coded traffic reports, which receive new information about Rundunk. Furthermore, for example, game consoles with a connection via the Internet, such as in multi-user games, with access to Internet portals where the players can put their 'high score' or MP3 player, for example. when downloading firmware or user interfaces ('Skinning') and when downloading current media from the Internet, podcasts' on the MP3 or video player.

Furthermore, a publicly accessible database with the list of device identifiers, for example, supplemented by the respective affected Device types or device descriptions are set up so that used equipment buyers can detect any blocking. To do this, the prospective buyer can enter the serial number of the device on a manufacturer's website or another administrator of the list of device IDs and see if the device has been reported stolen. Similar queries are already available today to check the validity of manufacturer's warranties (eg for hard disks or notebook computers from certain manufacturers).

Claims

claims An arrangement for securing mobile devices (1) with means (14, 15, 16, 17) for supplying a list (21) of device identifications, which list (21) contains device identifications of devices registered as to be blocked, with comparison means (11 ) for comparing an identifier of the mobile device (1) with the list (21) of device identifiers and with means (11) for blocking a function of the device (1) in case of a match of the identifier of the mobile device (1) with the list (21) of device identifiers becomes. 2. Arrangement according to claim 1 with means (14) for reading an exchangeable data carrier (16, 17), wherein the list of device identifiers on the removable data carrier (16, 17) is stored. 3. Arrangement according to claim 1 with a communication interface (15) for loading the list (21) of device identifiers from a control center (2) in which the list of device identifications is present. 4. A method for securing mobile devices, wherein a list (21) of device identifiers is supplied to a mobile device (1), which list (21) contains device identifications of devices registered as to be blocked, wherein an identifier of the mobile device (1) the list of device identifiers (21) is compared and wherein a function of the device (1) is disabled if the comparison results in a match of the identifier of the mobile device (1) with the list (21) of device identifiers. The method of claim 4, wherein the list (21) of device identifiers is read from a removable volume (16, 17) to a random access memory (18) accessed for the purpose of comparison. 6. The method of claim 5, wherein the list (21) of device identifiers in a first access to the data carrier (16, 17) or when reading on the data carrier (16, 17) stored user data in the working memory (18) is read. The method of claim 4, wherein the list (21) of device identifiers is obtained via a communication interface (15). 8. The method of claim 7, wherein the list (21) of device identifiers when establishing a communication connection with an operator of a communication network (2) or when logging in a communication network (2) or when loading user data from a Data provider, in particular via an Internet connection is obtained. 9. Arrangement according to one of claims 1 to 3 wherein the mobile devices (1) a navigation device, in particular a navigation device for fixed installation or for temporary operation in a motor vehicle, or a mobile phone or a Small computer with mobile phone module or short-range radio module, such as WLAN, Bluetooth or the like.