Title of Invention

A METHOD OF OPERATING USER STATIONS IN A SUBSCRIBER SYSTEM AND A REMOVABLE DATA STORE

Abstract

A method of operating user stations in a mobile communications system which allow a set of mobile station identifiers (IMEIs) to be defined for use in relation to a particular removable data store (8IM) which is necessary for the mobile station to obtain service in a network. The set defined for the 8IM may be specified in records held in the 8IM memory 38. By comparing the IMEI of a mobile station into which the 8IM 34 is currently inserted with the set previously defined, the 8IM 34 can determine whether or not the mobile station is intended to be used with the 8IM. If not, the 8IM 34 may take remedial action, such as disabling critical data fields in the 8IM memory to prevent the mobile station receiving full service in the mobile'communications network.

Full Text

SUBSCRIBER SYSTEMS This invention relates to a method of operating user stations in a subscriber system, the user stations being adapted for use with removable data store, such as a subscriber identity module (SIM) as used in a GSM (Global System for Mobile communications) digital cellular radio system, and to such a data store. In a known conventional GSM system, each subscriber is provided with a SIM, also referred to as a smart card, which is inserted into a user station, such as a mobile telephone handset, in order to allow the subscriber to receive service in a GSM network with the user station. The SIM holds various permanent data records, such as a record of the international mobile subscriber identity (IMSI) whereby the subscriber is recognised, and a record of an authentication key whereby the subscriber is authenticated by a mobile communications network. The SIM also holds various other subscriber-specific data records, some of which are modifiable. The SIM format and the SIM/user station interface are standardised such that a SIM may be placed in any of a number of different user stations in order to obtain service in a GSM network. This has tne advantage of allowing the SIM to be readily transportable between user stations, but various disadvantages accrue. Some mobile network operators subsidise the initial cost of a user station for use in their own network. However, since it is possible to transport a SIM from a user station intended for use on one network to a user station intended for use on another, subsidies provided by one network operator have been used to the benefit of a different network operator. Furthermore, a user station into which a SIM is placed may be stolen. It has in the past been possible to obtain service on a network using a stolen user station. A number of mechanisms are known which allow a user station to be "latched" to a SIM, which are generally derived from GSM Technical Specification 02.22. The latching is performed on the first valid SIM which is inserted into the user station. The latching, which is intended to prevent operation of the user station with a different SIM, is permanent until a predetermined unlatching code is entered in the user station, after which time the latching function is permanently disabled. These types of latching mechanism rely on the security of the software provided in the user station, which can occasionally be circumvented by a determined fraudster. There are also known network-based mechanisms for barring users of stolen user stations. A GSM network operator may maintain an equipment identity register (EIR) , which holds a list of international mobile equipment identities (IMEIs) and their associated status. The EIR may hold a black list of IMEIs for user stations which should be barred, for example because the user stations are stolen. However, this mechanism requires the network operator to first be notified of a stolen user station, and then to make a decision whether or not to positively bar the user station from the network. I EP-A-067565j^describes a "self-disabling" device for a mobile user station. The network operator compiles a list of IMEIs of stolen user stations and broadcasts the list in the network. A user station stores the list of stolen IMEIs in a buffer memory, and compares the IMEI of the user station with each of the IMEIs on the stored list. If the IMEI of the user station corresponds with an item on the stored list, the user station transmits a message to the network indicating that the user station is being disabled, and then proceeds to disable the transmitter of the user station. Again, this mechanism requires the network operator to be aware of the identities of stolen mobile stations, and to make a barring decision when placing the IMEI on the list broadcast in the network. In accordance with one aspect of the present invention there is provided a method of operating user stations in a subscriber system, said method comprising: providing a plurality of subscribers with removable data stores, each of which is for insertion into any of a plurality of user-stations; holding data defining, for each of said data stores, a set of one or more user stations which are intended for use in combination with said data store, each said set being different; monitoring the identity of the user stations in which said data stores are currently inserted; and altering the operative state of a data store on the basis that the user station in which the data store is currently inserted is not a member of said set defined for the data store. This aspect allows a predefined set of user stations to be associated with each data store, and action to be taken in the data store automatically when the data store is inserted into a user station which does not appear in that predefined set. Such action may consist of any of a number of options, including overwriting the operator name string held in the data store, so that a predefined message such as "dial operator" appears in place of the operator name on the display of the user station, activating a fixed dialling list function in the user station to prevent calls being made to any dialling number except for one or more predefined dialling numbers, and/or overwriting records in the data store which are necessary to obtain service in the network. The defining data may identify user stations individually (in a GSM-type system, by means of their IMEI) , a range of user stations (in a GSM-type system, by specifying a range of IMEIs) , and/or a type of user station (in a GSM-type system, by specifying a type approval code (TAC) contained in the IMEI). This allows significant flexibility in the specification of user stations which may be used in combination with a removable data store. In accordance with a further aspect of the invention there is provided a removable data store for insertion into any of a plurality of user stations in a subscriber system, and said store comprising a memory portion holding data defining a set of one or more user stations which are intended for use in combination with said data store, and means for altering the operative state of said data store if the user station into which the data store is currently inserted is not in said set. This aspect of the invention provides a removable data store having functionality allowing the identities of one or more user stations to be specified for which the data store will provide a given operative state. The altered operative state may, for example, provide a limited service in the network, if it is preferred that the data store is not used in combination with the user station into which it is inserted. According to a further aspect of the invention there is provided a method of operating user stations in a subscriber system, said method comprising: providing a removable data store for insertion into any of a plurality of user stations; holding data specific to said data store, said data defining a set of one or more user stations which are intended for use in combination with said data store; altering the operative state of a user station into which the data store is currently inserted on the basis that said current user station is not within said set; and modifying said data-store specific data to identify at least one further mobile station which is intended for use with said data store. This aspect provides a mechanism whereby a set of user stations with which a particular data store is intended to be used may be updated. For example, it i may be determined that the user station currently being used is acceptable to the system operator, even though it was not originally intended for use in combination with the data store in question. In accordance with a yet further aspect of the invention there is provided a method of operating user stations in a subscriber system, said method comprising: providing a removable data holding data specifying one or more user stations which are intended for use particularly with said data store; monitoring the identity of a user station in which said data store is currently inserted, said current user station being of a type approved for use in said system; and altering the operative state of the data store on the basis that said current user station is not identified by said specifying data. This aspect of the invention allows a set of one or more user stations to be positively identified, and the operative state of the data store to be altered if the data store is inserted into a different user station, when that different user station is not one of the positively identified user stations intended for use with the data store. Other features and advantages of the invention will become clear from the following description of particular embodiments of the invention, in which reference is made to the accompanying drawings, wherein: Figure 1 is a block diagram schematically illustrating a cellular mobile radio communications system; Figure 2 is a block diagram schematically illustrating a mobile station used in the system of Figure 1; Figures 3 to 5 illustrate data records held in a SIM in accordance with embodiments of the present invention; and Figure 6 is a flow diagram illustrating procedures carried out in accordance with the present invention. A GSM network, referred to as a public land mobile network (PLMN), is schematically illustrated in Figure 1. This is in itself known and will not be described in detail. A mobile switching centre (MSC) 2 is connected via communication links to a number of base station controller (BSCs) 4. The BSCs 4 are dispersed geographically across areas served by the mobile switching centre 2. Each BSC 4 controls one or more base transceiver stations (BTSs) 6 located remote from, and connected by further communication links to, the BSC. Each BTS 6 transmits radio signals to, and receives radio signals from, mobile stations 8 which are in an area served by that BTS. That area is referred to as a "cell". A GSM network is provided with a large number of such cells, which are ideally contiguous to provide continuous coverage over the whole network territory. A mobile switching centre 2 is also connected via communications links to other mobile switching centres in the remainder of the mobile communications network 10, and to other networks such as a public service telephone network (PSTN), which is not illustrated. The mobile switching centre 2 is provided with a home location register (HLR) 12 which is a database storing subscriber authentication data including the international mobile subscriber identity (IMSI) which is stored in, and unique to, each SIM. The mobile switching centre is also provided with a visitor location register (VLR), not shown in Fig. 1, which is a database temporarily storing subscriber authentication data for mobile stations active in its area. In addition, the mobile network contains a short message service centre (SMC) 13, which is adapted to transmit both conventional GSM-type short message service (SMS) messages to selected mobile stations, and to transmit remote SIM updating (RSU) SMS messages to selected mobile stations (as described in European Patent Application No. 0562890, of which the contents are incorporated herein by reference). Furthermore, in accordance with the present invention, the network is provided with an IMEI/IMSI register (IIR) 14, which is a database holding a list of IMSIs belonging to SIMs associated with the network, and against each IMSI record, a record of the IMEI of the user station in which the SIM was last known to be inserted. Referring to Figure 2, a mobile station 8 comprises a transmit/receive aerial 16, a radio frequency transceiver 18, a speech coder/decoder 20 connected to a loudspeaker 22 and a microphone 24, a processor circuit 26 and its associated memory 28, an LCD display 30 and a manual input port (keypad) 32. The mobile station is connected to a removable SIM 34 via electrical contacts 35. The International Mobile Equipment Identified (IMEI) is stored in a nonvolatile portion of the mobile station memory 28. The SIM 34 connected to the mobile station has a SIM processor 36, for example a Hitachi H8 microprocessor, and SIM memory 38, which includes for example 16 kilobytes of mask-programmed ROM containing the SIM operating system, 8 kilobytes of read/write EEPROM for the non-volative storage of data items and 256 bytes of RAM for use by the SIM processor 3 6 during operations. At present, two physical formats of SIM are specified by the GSM and ISO standards. The first is referred to as an ID-1 SIM, which is a removable smart card complying with the ISO 7816 standard and being of similar dimensions to that of a conventional credit card. The second is referred to as a plug-in SIM, which is a smart card of the same thickness as the ID-1 SIM, but only measuring 25 millimetres in length and 15 millimetres in width. As described above, the SIM 34 is used for the storage and retrieval of data items by the processor 26 of the mobile station 8. The command set, data file structure and data coding format for data communicated via the interface between the mobile station processor 26 and the SIM processor 36 are all specified, in the GSM system, in GSM technical specification 11.11. Fig. 3 illustrates an IMEI set record held in the EEPROM of the SIM memory 3 8 in accordance with one embodiment of the invention. This IMEI set record holds a list of IMEIs, specifying each IMEI in turn, for user stations with which the SIM 34 is intended to be used. The IMEI as defined in the GSM specifications, consists of the following elements: 1. a type approval code (TAC) of six digits, which is unique for a particular handset type; 2. a factory code (FAC) of two digits, identifying the final assembly plans for the user station; 3 . a serial number of six digits, which is unique for each mobile station of a given type; 4. a check digit of one digit; and 5. for GSM phase 2-type user stations only, a software version code of two digits. Fig. 4 illustrates an alternative IMEI set record format for specifying the IMEIs of user stations which are intended for use in combination with a particular SIM 34 . In this format, a list of ranges of IMEI numbers is given, each entry specifying a lower limit to the IMEI range and a higher limit to the IMEI range. Fig. 5 illustrates a further alternative IMEI set record format for specifying the IMEIs of user stations which are intended to be used with a SIM 34. In this format, a list of TACs is provided, each entry specifying a particular TAC. This IMEI set record format essentially identifies user stations by their type, in view of the use of the type approval code as a type-specific identifier. Any of the IMEI set record formats illustrated in Figs. 3 to 5 may be provided in the SIM memory 38 alone or in combination. The IMEI set record will in practice hold one or more entries, depending on the number of mobile stations 8 which are intended for use with the SIM 34. Fig. 6 illustrates an IMEI update procedure performed in accordance with an embodiment of the present invention. The procedure is designed to inhibit the use of a SIM 34 with a user station with which the SIM 34 is not intended to be used. When the mobile station 8 is switched on in a location area in which the mobile station 8 was previously switched off, the mobile station 8 transmits a signal to the network initiating an "IMSI attach" procedure. This IMSI attach procedure involves the mobile station 8 transmitting not only a SIM identifier, in this case a temporary mobile subscriber identity (TMSI) of the SIM 34 attached to the mobile station 8, but also the IMEI of the mobile station 8, to the network for checking purposes. As a result of the IMSI attach procedure, a flag in the VLR of the MSC 2 is set to indicate that the mobile station 8 is switched on and able to receive incoming calls. The MSC 2 then proceeds to interrogate the IIR 14 to retrieve the IMEI held against the IMSI record for the SIM 34 in question, indicating the last-known IMEI of the mobile station 8 in which the SIM 3 4 was previously inserted, step 56. If the IMEI currently signalled to the network is the same as the IMEI held previously in the IIR 14, determination step 56, the IMEI update procedure is terminated. If however the IMEI currently signalled in the network is different to that previously stored in the IIR 14, the MSC 2 proceeds to command the IIR to store the IMEI currently signalled in the network against the record for the IMSI in question, step 58. The MSC 2 then proceeds to forward the current IMEI to the SMC 13, step 60. On receipt of the current IMEI, the SMC 13 generates a remote SIM updating (RSU) short message service (SMS) message and transmits it, via the MSC 2, a BSC 4, and the serving BTS 6, to the mobile station 8. This RSU SMS message is as described in EP-A-0562890. The RSU SMS message contains a flag indicating to the SIM processor 3 6 that the SMS message is an RSU SMS message, and a command addressed to the SIM processor 3 6 to store the IMEI currently signalled by the mobile station in the network. On receipt of the current IMEI updating RSU SMS message, the mobile station processor 26 forwards the message, via the interface 35, to the SIM processor 36, for storage as a conventional SMS message. However, because the SMS message contains an RSU flag, the SIM processor 36 does not store the message as a conventional SMS message, but conducts the command included in the RSU message, namely to store the IMEI in the message in a current IMEI record in the SIM memory 38, step 64. The SIM processor 36 compares the IMEI stored in the current IMEI record with the set of IMEIs specified in the IMEI set data record. If the current IMEI appears in the set, no further action is taken in the SIM 34. If however the current IMEI does not appear in the set defined for the SIM 34, the SIM processor 36 proceeds to self-reconfigure the SIM in accordance with any or all of a number of possible options under the control of the SIM operating system, step 68. A first option is for the SIM processor 36 to over-write the operator name string stored in a record in the SIM memory 3 8 with a message indicating to a user that the mobile station 8 was not intended to be used with the SIM 34. This has the effect of the mobile station 8, presenting the message rather than the name of the mobile network operator to a user on the display 30 when the mobile station 8 is switched on. A second option is for the SIM processor 3 6 to set a flag in the SIM memory 3 8 indicating that a "fixed dialling" feature is to be enabled in the mobile station 8. The enablement of this feature effectively prevents the mobile station 8 being used for calling dialling numbers other than one or more dialling numbers held in a fixed dialling number (FDN) list in the SIM memory 38 . The SIM processor 36 may also enter a predetermined dialling number in the FDN list, such as a customer services help desk, to allow the SIM/mobile station incompatibility problem to be solved with help from the network operator. If this option is to be employed, the predetermined dialling number may either be preprogrammed in the SIM or included in the RSU SMS message which contains the current IMEI. A third option is to disable critical data records held in the SIM to prevent the mobile station receiving service in the network. For example, the processor 36 of the SIM in its reconfigured state may prevent access to the authentication key record by the mobile station 8, thereby ensuring that a user of the mobile station 8 cannot be properly authenticated in the network, effectively barring the user from obtaining service in the network. Other critical SIM records may alternatively, or also, be disabled. A fourth option is to alter the user's PIN number record held in the memory 38 of the SIM 34. This would effectively bar the user utilising the SIM 34, unless the user obtains the new PIN, for example by contacting a customer services help desk. If this option is to be employed, the new PIN may either be preprogrammed in the SIM or included in the RSU SMS message which contains the current IMEI. Any or all of the above options, and variants thereof, may be used alone or in combination. There may also be some time delay between activation elements of a combination of the options. For example, an initial step taken by the SIM processor 36 may be to overwrite the operator name string held in the SIM memory 38. If after a predetermined delay time the current IMEI has not been updated with an acceptable mobile station 8 (i.e. one identified in the IMEI set record) , the SIM 34 may enable the fixed dialling number feature, and/or disable critical SIM records, and/or overwrite a PIN number record. With the SIM 34 reconfigured as described, the user of the mobile station 8 is either prompted, by means of a message appearing on the display of the user station, or forced, by disablement of one or more the functions of the SIM 34, to contact the network operator in order to solve the SIM/mobile station incompatibility problem. As a result, the network operator can make a decision as to whether the mobile station 8 currently used with the SIM 34, is acceptable or not. If the new mobile station 8 is acceptable, the network operator retrieves the current IMEI of the mobile station 8 from the IIR 14 and generates a command addressed to the SMC 13 to originate an IMEI set record updating RSU SMS message. This IMEI set record updating RSU SMS message contains a command to the SIM processor 36 to store the current IMEI of the mobile station 8 in the IMEI set record. This RSU SMS message is constructed and sent to the mobile station 8 as described in EP-A-0562890. On receipt of the IMEI set updating RSU SMS message, the mobile station processor 26 forwards the message, via the interface 35, to the SIM processor, for storage as a conventional SMS message. However, because the SMS message contains an RSU flag, the SIM processor does not store the message as a conventional SMS message, but conducts the command included in the RSU SMS message, namely to add the current IMEI to the IMEI set record. Since the current IMEI then appears in both the current IMEI record and the IMEI set record, the SIM processor 3 6 reverses the reconfiguration previously undertaken, thus returning the SIM 34 to its normal operative state. An IMEI set updating RSU SMS message may be transmitted to the SIM 34 by the network operator at any time in order to add, or delete, one or more IMEIs from the IMEI set record. This alters the set of mobile stations 8 which are intended for use with the SIM 34. This may be required, for example, if the subscriber notifies the network operator of an imminent change of mobile station 8 to be used with the SIM 34. Alternatively, the network operator can originate an IMEI set updating RSU SMS message, in the case of the SIM 34 being originally intended for use with one or more ranges, or type, of mobile stations, when additional ranges or types of mobile stations 8 are introduced which are acceptable for use with the SIM 34. Possible modifications and variations of the above-described embodiments are envisaged. In accordance with functionality defined for the SIM 34 in the embodiments described, the SIM processor 3 6 is not able to interrogate the memory 2 8 of the mobile station 8 directly in order to ascertain the IMEI of the mobile station 8. However, with an alternative SIM/mobile station functionality, the SIM processor 3 6 may interrogate the mobile station processor 2 6 to retrieve the IMEI mobile station memory 2 8 directly. The SIM 34 could then self-reconfigure automatically without the need for the issuance of a notification of the current IMEI via the network. Alternatively, it is not necessary for the records defining a set of IMEIs which are intended for use in combination with a SIM to be held in the SIM memory 38. For example, such records defining sets of IMEIs allocated to different SIMs may be held in the IIR 14 in the network. When the network is informed of the current IMEI associated with a SIM 34, the MSC 2 can ascertain, with reference to the set defined for the SIM 34 in the IIR 14, whether or not the mobile station 8 into which the SIM 34 has been inserted is a member of the allocated set. If not, the MSC 2 can originate an RSU SMS message, to be sent via the SMC 13, which has the effect of reconfiguring the SIM 34, using any of the options previously suggested. For example, an RSU SMS message may then be sent to the mobile station commanding the -SIM processor 3 6 to overwrite the operator name string held in the SIM memory 38, to enable an FDN feature by setting a flag in the SIM memory 38, to disable a critical SIM record, and/or to alter a PIN number record in the SIM memory 3 8. Furthermore, although in the above-described embodiment the IMSI attach procedure is used in order to inform the network of the IMEI of the mobile station into which the SIM 34 is currently inserted, other suitable signalling procedures carried out over the radio interface between the mobile station 8 and the network may be used to ascertain the IMEI of the mobile station 8. For example, the IMEI may be signalled from the mobile station 8 during a location updating procedure, during authentication procedures, etc. The present invention may be particularly f advantageously utilised in relation to a SIM which is designed for use with a particular type of compatible mobile station as indicated by the TAC in the mobile station's IMEI. For example, the mobile station 8 may be provided with a particular functional feature, the SIM 34 having data fields for use by the mobile station 8 for realising that feature. The present invention allow the SIM 34 to be reconfigured when used in a mobile station 8 which is not of the type with which the SIM 34 was intended to be used. Rather than disabling the current mobile station 8 in a particular manner, the SIM 34 may be reconfigured to suppress or alter the functionality associated with the feature which is not provided on the current mobile station 8. Finally, although the present invention has been described in relation to a GSM-type network (i.e, GSM networks and variants thereof, such as a DCS 1800 network), the invention may also be realised in other types of mobile communications networks, whether using TDMA, CDMA, or other radio interface protocols, and in other types of subscriber systems utilising removable data stores such as smart cards. It will be appreciated that further modifications and variations may be employed without departing from the scope of the present invention. CLAIM 1. A method of operating user stations in a subscriber system, said method comprising: providing a pluralit y of subscribers with removable data stores, each of which is for insertion into any of a plurality of user stations/ holding data defining, for each of said data stores, a set of one or more user stations which are intended for use in combination with said data store, each said set being different; monitoring the identity of the user stations in which said data stores are currently inserted; and altering the operative state of a data store on the basis that the user station in which the data store is currently inserted is not a member of said set defined for the data store. 2. A method in accordance with claim 1, wherein said defining data is held in said data store. 3. A method according to claim 1 or 2, wherein said altering step comprises altering data held in a memory portion in said data store if said current user station is not in said set defined for the data store. 4. A method according to claim 3, wherein said memory portion is for holding an operator name string. 5. A method according to claim 3, wherein said memory portion is for enabling a feature preventing said user station being used to call any dialling number other than one or morn predetermined dialling numbers. * 6. A method•according to claim 3, wherein said memory portion i.s for holding data necessary to a user to obtain normal service in said system. 7. A method according to claim 6, wherein said memory portion is for holding a user validation code such -as a PIN number. 8. : A method according to any preceding claim, wherein said altering step prevents said user station being used to obtain normal service in said system. 9. A method according to any preceding claim, comprising transmitting a message to said user station via a radio interface to cause said altering step. 10. A method according, to claim 9, wherein said message comprises data indicating the identity of said current user station. 11. A method according to claim 9 or 10, wherein said current user station forwards data contained in said mes '.ige to said data store. 12. A method according to any preceding claim, wherein said defining data identifies user stations individually. 13. A method according to any preceding claim, wherein said defining data identifies a range of user stations. 14. A method according to any preceding claim, wherein said defining data identifies a type of user station. 15. A method according to any preceding claim, further comprising the step of modifying said defining data . 16. A method according to claim 15, wherein said modifying step comprises transmitting a message to said user station via a radio interface. 17. A method according to claim 15 or 16, further comprising returning said data store to its original operative state as a consequence of said modifying step . 18. A method of operating user stations in a subscriber system, said method comprising: providing a subscriber with a removable data store for insertion into any of a plurality of user stations; holding data specific to said data store, said data defining a set of one or more user stations which are intended for use in combination with said data store; altering the operative state of a user station into which the data store is currently inserted on the basis that said current: user station is not within said set; and modifying sai d data si: ore- specific data to identify at least one further user station which is intended for use with said data store. 19. A method according to claim 18, wherein said one further user station is the user station into which the data store is current 1y inserted. 20 . A method of oppr-it; ing. user stations in a subscriber system, sa id method comprising: providing a subscriber with a removable data store for insertion into any of a plurality of user stations; holding data specifying one or more user stations which are intended for use particularly with said data store; monitoring the identity of a user station in which said data store is currently inserted, said current user station being of a type approved for use in said system; and altering the operative state of the data store on the basis that said current user station is not identified by said specifying data. 21. A telecommunications system adapted to perform the steps defined in any of the preceding claims. 22. A removable data store for insertion into any of a plurality of user stations in a subscriber system, and said store comprising a memory portion holding data defining a set of one or more user stations which are intended for use in combination with said data store, and means for altering the operative state of said data store if the user station into which the data store is currently inserted is not .in said set. 23 . A method, or apparatus, according to any preceding claim, wherein said subscriber system is a mobile communicat ions system. 24, A method of operating user stations in a subscriber system, subs t ant. i a I ly as herein described , with reference to the accompanying drawings. 25. A te1ecommunicat ions system, substant i a 11y as here i n described, with reference to the accompanying draw i ngs.

Documents:

1585-mas-1998-abstract.pdf

1585-mas-1998-claims duplicate.pdf

1585-mas-1998-claims original.pdf

1585-mas-1998-correspondence others.pdf

1585-mas-1998-correspondence po.pdf

1585-mas-1998-description complete duplicate.pdf

1585-mas-1998-description complete original.pdf

1585-mas-1998-drawings.pdf

1585-mas-1998-form 1.pdf

1585-mas-1998-form 3.pdf

1585-mas-1998-other documents.pdf