Methods for restricting access to mobile networks based on person and / or device

Abstract

Method for person- and / or device-related access restriction of mobile networks, wherein at least one original IMEI number (1) is stored on each original mobile device (2), wherein a first computer network (3) manages the allocation of the original mobile devices (2) to original persons (13), wherein each original person (13) is assigned an original IMSI number (4), wherein the original IMSI numbers (4) are each stored on a SIM card (5), and wherein the SIM cards (5) assigned to the original persons (13) enable mobile network usage at a specific tariff. wherein the original IMEI numbers of the mobile devices (2) provided to the original persons (13) are assigned to the respective original IMSI numbers (4) of the original persons (13), so that a plurality of original data records (6) comprising one of the original IMEI numbers (1) and one of the original IMSI numbers (4) is formed, wherein at least a part of the original data records (6) is stored in a database (7, 14), characterized by the fact that The first computer network (3) - before the original mobile devices (2) are handed over to the original persons (13) - transmits the original data records (6) to a second computer network (11), the second computer network (11) registering the original persons (13).

Description

[0001] The invention relates to a method for person- and / or device-specific access restriction to mobile radio networks, in particular for internet use. For this purpose, at least one original International Mobile Equipment Identity number (IMEI number) is stored on each original mobile radio device, with a first computer network managing the transfer of the original mobile radio devices to original individuals (or customers). Each original individual is assigned an original International Mobile Subscriber Identity number (IMSI number), with the original IMSI numbers each being stored on a SIM card (Subscriber Identity Module card). The SIM cards assigned to the original individuals enable mobile radio usage at a specific tariff.

[0002] US 2007 / 0275718 A1 describes a method for person- and device-specific access restriction to mobile networks. An original IMEI number is stored on original mobile devices. A first computer network manages the transfer of the original mobile devices to original individuals. The original individuals are assigned original IMSI numbers, each of which is stored on a SIM card. The SIM cards assigned to the original individuals enable mobile phone usage at a specific tariff. The IMEI numbers are assigned to the IMSI numbers, creating a large number of original data records, which are stored in a database.

[0003] US 2016 / 0098675 A1 addresses the linking of vehicles with mobile devices, thus describing a method for vehicle- and device-specific access restriction to mobile networks. The respective mobile device (IMEI) is assigned to a piece of equipment (IMSI), which could be, for example, an automobile.

[0004] DE 198 188 46 A1 teaches a method for person- and device-specific access restriction to mobile networks. Original IMEI numbers are stored on original mobile devices and original IMSI numbers are stored on SIM cards. A first computer network, in the form of the infrastructure of the network operator or service provider, manages the transfer of the original mobile devices to the original individuals of a customer or company. Furthermore, the IMSI numbers or SIM cards are assigned to the employees, enabling mobile phone usage at a specific tariff. The IMEI numbers are assigned to the respective IMSI numbers, thus creating a large number of original data records.

[0005] Such procedures are also known in practice. The original person can, in principle, insert the SIM card into any mobile device, so that the use of the tariff defined via this SIM card is essentially device-independent. However, such device independence is disadvantageous in certain situations. For example, when a retail chain sells large quantities of mobile devices with a low-cost mobile phone tariff, in particular with a low-cost data tariff for internet use. In this case, a large number of SIM cards come into circulation, which enable the use of this low-cost tariff. Because the SIM cards are device-independent, the respective customer can use the low-cost tariff on a variety of devices, resulting in an undesirably strong dumping effect.

[0006] The technical object of the invention is therefore to provide a method which prevents or limits the dumping effect described.

[0007] This object is achieved by a method for person- and / or device-related access restriction of mobile radio networks, in particular for the purpose of Internet use, wherein at least one IMEI number is stored on each original mobile radio device, wherein a first computer network manages the transfer of the original mobile radio devices to original persons, wherein each original person is assigned an original IMSI number, wherein the original IMSI numbers are each stored on a SIM card, wherein the SIM cards assigned to the original persons enable mobile radio usage at a specific tariff, wherein the original IMEI numbers of the mobile radio devices provided to the original persons are assigned to the respective original IMSI numbers of the original persons, so that a plurality of original data records comprising one of the original IMEI numbers and one of the original IMSI numbers is formed, wherein at least some of the original data records are stored in a database, characterized in that the first computer network - before the original mobile devices are handed over to the original persons - transmits the original data records to a second computer network, whereby the second computer network registers the original persons.

[0008] The term "first computer network" refers in particular to a computer group of an entity. An entity can, for example, be a company, such as a mobile device manufacturer or a company in a mobile device manufacturer's distribution chain. The entity or company is particularly preferably a retail chain and more preferably a discounter. The computer group of the entity includes, for example, web servers, mail servers, databases, computer servers, workstations, and the like. The term "management" refers in particular to the commercial and / or logistical processing of transferring the original mobile device to the original person. The term "transfer" is preferably to be understood as a change in the exercise of actual control over the original mobile device, for example through sale, but also through rent or donation.The term “SIM card” refers in particular to full-size, mini, micro and nano SIM cards, but also to embedded SIM cards (eSIM cards), i.e. permanently installed electronic components.

[0009] The invention is based on the finding that the assignment of the original IMEI numbers to the respective original IMSI numbers and the corresponding storage of these original data records initially entails increased IT expenditure. The corresponding data must be stored, assigned, and transmitted in order to benefit from the added value of the invention. However, the additional IT expenditure is justified over time, as this effectively protects conventional tariffs from cheaper tariffs. In particular, the method according to the invention prevents misuse. The method according to the invention allows for access restrictions based solely on individuals, access restrictions based solely on devices, and access restrictions based on individuals and devices.The procedure also allows for quantified access restrictions, for example by allowing only a certain number of people or devices to access the low-cost tariffs.

[0010] According to a particularly preferred embodiment, an IMEI number and an IMSI number to be checked are transmitted during login and / or registration of a mobile device for the purpose of using the mobile network, wherein the IMEI number and the IMSI number to be checked form a data set to be checked, wherein a check is carried out to determine whether the data set to be checked corresponds to one of the original data sets from the database. The database is particularly preferably part of a second computer network. The term "second computer network" refers in particular to a computer group of an entity, for example a company and preferably a mobile network operator or a company closely associated with a mobile network operator. The computer group of the second computer network comprises, for example, web servers, mail servers, computer servers, databases, base stations forming radio cells, and the like.It is preferred that the second computer network checks whether the data record to be checked corresponds to one of the original data records. It is preferred that a second or the second computer network checks whether the data record to be checked corresponds to one of the original data records from the database. Preferably, the second computer network comprises the database. It is advantageous to check whether the IMEI number to be checked corresponds to one of the original IMEI numbers. Preferably, it is checked whether the IMSI number to be checked corresponds to one of the original IMSI numbers.

[0011] It is very advantageous if, after registration, the mobile device is granted access, and preferably automatic access, to the mobile network in accordance with one of the specific tariffs, and in particular only if the data record to be checked corresponds to one of the original data records from the database. It is particularly preferred if the mobile device is registered during registration, and in particular only if the data record to be checked corresponds to one of the original data records. It is expedient if the mobile device is not granted access, or automatic access, to the mobile network or is not registered if the data record to be checked does not correspond to any of the original data records. It is expedient for the data record to be checked to correspond to the original data record if both the IMEI number to be checked is identical to the original IMEI number and the IMSI number to be checked is identical to the original IMSI number.If access or registration is only guaranteed with the simultaneous identity of the IMEI and IMSI numbers, a person- and device-specific access restriction applies. This means that access to the mobile network with the specific plan or registration can only be completed with the combination of the original SIM card and the original mobile device.

[0012] Preferably, the respective original data set is created before the original mobile device is handed over to the original person or within the first month after it is handed over to the original person. It is expedient if the respective original data set is created within the first year, the first quarter, the first month, the first week, the first day, or the first hour after the original mobile device is handed over to the original person. Most preferably, the respective original data set is created exclusively before the original mobile device is handed over to the original person.

[0013] It is possible for the original data records to be created—preferably for the first time—by the first computer network and / or by a second computer network or the second computer network. It is preferred for the original data records to be created or stored for the first time by the first computer network. The first computer network and / or the second computer network advantageously also stores the original IMSI number of the original person in addition to the original IMEI number.

[0014] The second computer network preferably stores registration data—in addition to the original data records. It is preferred that the second computer network has an interface for receiving the registration data, wherein the interface is preferably designed to enable the digitization of the registration data provided by the original person. The interface is expediently arranged with respect to the information flow of the registration data between the original person and the database or the second computer network. The registration data preferably includes the name and address of the original person and, for example, a desired tariff or the desired model of the original mobile device.

[0015] It is particularly advantageous if the original persons receive a means of authentication during registration. The means of authentication can, for example, be a password, a simple sequence of numbers, or even the name of the original person. In the case of the means of authentication, it is preferably not a personal identification number (PIN) or personal unblocking key (PUK) associated with the SIM card. The means of authentication is preferably a means of authentication against a second computer network or the second computer network. This distinguishes the means of authentication from a PIN or a PUK because both the PIN and the PUK are used to unlock chip cards and do not serve as a means of authentication against a computer network. For example, PINs or PUKs are not transmitted wirelessly from the mobile device to a base station.In contrast, the means of authentication is preferably sent wirelessly from the original mobile device to the second computer network.

[0016] Preferably, the initial assignment of the original data records to the original persons is performed by a second computer network or the second computer network. The assignment of the original data records to the original persons is expediently performed during the registration of the original person.

[0017] According to a particularly preferred embodiment, the second computer network or a second computer network transmits the original IMSI numbers or SIM cards to the first computer network. It is preferred that the second computer network transmits the respective original IMSI numbers or SIM cards to the first computer network before the respective original mobile device - preferably together with the SIM card - is handed over to the original person. It is possible for the IMSI number to be transmitted to the first computer network by mailing the SIM card. According to a further embodiment, the original mobile device has an eSIM card from the outset. In this case, it is expedient for the second computer network to transmit the original IMSI number to the first computer network purely electronically.

[0018] Preferably, the respective IMEI number is transmitted to the second computer network along with an assignment option, for example, with the corresponding original IMSI number or with the name of the original person. It is expedient for the original IMEI numbers or the original data records to be stored in a database or in the database of the second computer network after transmission to the second computer network.

[0019] According to one embodiment, the verified IMSI number corresponds to one of the original IMSI numbers, wherein the verified IMEI number is assigned to a further mobile device and does not correspond to any of the original IMEI numbers, wherein the further mobile device can be registered and then authorized to use the mobile network at one of the specific tariffs by storing the verified IMEI number of the further mobile device in the database of a second or the second computer network. Preferably, the verified IMEI number of the further mobile device is stored in such a way that it is assigned to the original IMSI number and forms another data record with it. It is possible that after the verified IMEI number of the further mobile device has been stored, the original IMEI number of the original mobile device is deleted from the database of the first or the second computer network.It is also possible for the original IMEI number to remain in the database of the first or second computer network, and for the original mobile device to continue to be authorized to use the specific tariff. It is particularly preferred that the registration of the additional mobile device not be automatic. Preferably, the original person can use the authentication method to register the additional mobile device(s) if the verified IMEI number does not match the original IMEI number.

[0020] It is possible that the verified IMEI number corresponds to one of the original IMEI numbers, whereby the verified IMSI number is assigned to another person and does not correspond to any of the original IMSI numbers. In this case, the additional person can be registered and then authorized to use the mobile network at one of the specific tariffs by storing the verified IMSI number of the additional person in the database. Expediently, the IMSI number of the additional person to be verified is stored in such a way that it is assigned to the original IMEI number and forms another data record, preferably in the database of a second or the second computer network. Preferably, only one person is authorized to use it, so that upon registration of the verified IMSI number of the additional person, the original IMSI number is deleted from the database.It is possible for multiple people to be authorized for the specific plan, and for multiple IMSI numbers to be stored for the original IMEI number. The SIM card of the additional person is preferably assigned to the second computer network, or a second computer network, or a mobile network of the second computer network. It is advantageous if the additional person must authenticate themselves as the original person's authorized successor, which is preferably done via the authentication method.

[0021] The invention is explained in more detail below with reference to a drawing that represents only one exemplary embodiment. It shows, in a schematic block diagram: Fig. 1 a method according to the invention prior to the transfer of original mobile radio devices, Fig. 2 the inventive method from Fig. 1 during the transfer of an original mobile device, Fig. 3 the inventive method from the Fig. 1 and Fig. 2 during the registration of the original person, Fig. 4 the method according to the invention from the preceding figures during the registration of the original mobile device to a mobile network and Fig. 5 the inventive method from the previous figures during the subsequent registration of another mobile device.

[0022] In Fig. Figure 1 depicts the period before the transfer of mobile devices 2 to original persons not yet shown here. A first computer network 3 is in possession of a plurality of original mobile devices 2, each of which has at least one original IMEI number 1. In the case of the first computer network 3, for example, this involves a plurality of electronic devices of a retail chain, which, for example, has mail servers, web servers, databases, firewall servers, and the like. In particular, the first computer network comprises a database 7.

[0023] In Fig. 1 also depicts a second computer network 11, which in this exemplary embodiment is part of a mobile communications operator. The second computer network 11 also comprises a plurality of electronic devices, including, for example, web servers, mail servers, and firewall servers. In particular, the second computer network 11 comprises a database 14 and a plurality of base stations 15, which are simplified here as a single radio mast. At an early stage of the method, the second computer network 11 also possesses a plurality of SIM cards 5, each of which has at least one original IMSI number 4.

[0024] In a first step according to this exemplary embodiment, the second computer network 11 now transmits the plurality of SIM cards 5 to the first computer network 3, which—in contrast to information flows—is represented by a thick arrow. The retail chain with the first computer network 3 then inserts the SIM cards 5 into the original mobile devices 2, whereby the original IMSI numbers 4 are assigned to the original IMEI numbers 1 for the first time. In addition to this physical assignment process, the first computer network 3 also creates original data records 6 in its database 7 comprising the respectively assigned original IMSI numbers 4 and the original IMEI numbers 1. The corresponding information flow into the database 7 is marked with thin arrows.This also shows that the original IMSI numbers 4 and the original IMEI numbers 1 are assigned to each other not only physically but also digitally. Finally, the original data records 6 are transmitted from the database 7 of the first computer network 3 to the database 14 of the second computer network 11.

[0025] In Fig. 2, the method according to the invention of this exemplary embodiment is depicted at the time of transfer of an original mobile device 2 to an original person 13. It is evident that this subsection of the method according to the invention can be designed such that it can be processed in a purely physical manner. In particular, the original person 13 can, for example, purchase the original mobile device 2 in cash at a cash register of the retail chain. It should be emphasized that the original mobile device 2 already contains the SIM card 5 at the time of the change of ownership. Alternatively, the SIM card 5 could, of course, also have been placed in the packaging of the original mobile device 2. Fig. Finally, it can also be seen from Figure 2 that the second computer network 11 is completely uninvolved in the process of transferring the original mobile device 2. In this exemplary embodiment, the original person 13 was informed by the retail chain with the first computer network 3, for example, via advertising or the product packaging itself, that the purchase of the original mobile device 2 entitles them to use a favorable internet usage tariff from the mobile operator with the second computer network 11.

[0026] Should the original person 13 decide to use the cheaply offered Internet usage tariff and thus the radio network of the second computer network 11 of the mobile operator, the original person 13 must first register with the second computer network 11. This is in Fig. 3. In this embodiment, the original person 13 merely needs to switch on the original mobile device 2 with the inserted SIM card 5, which automatically opens a registration window on the screen of the original mobile device 2. The original person 13 must then enter registration data 18, which includes, for example, the name and address of the original person 13. Furthermore, the specification of a desired tariff is required if several favorable tariffs are available for selection.

[0027] These registration data 18 are automatically transmitted via radio to the base station 15 or the second computer network 11 with two number blocks 8, 9 for the purpose of connection to a base station 15 of the radio network of the second computer network 11. In the correct case, the number block 8 corresponds to the original IMEI number 1 and is referred to below as the IMEI number 8 to be checked. Similarly, the number block 9 corresponds to the original IMSI number 4 in the correct case and is referred to below as the IMSI number 9 to be checked. At the time of radio transmission, the second computer network 11 does not yet know whether the IMEI number 8 to be checked corresponds to one of the stored original IMEI numbers 1, because in principle the original person 13 could easily have inserted the SIM card 5 into another mobile device, which, however, is not the case in Fig. 3 is not yet the case.

[0028] The IMEI number 8 and the IMSI number 9 to be checked form Fig. 3 a data record 10 to be checked. This data record 10 to be checked is compared by the second computer network 11 with the original data records 6. If a match is found such that both the two IMEI numbers 1, 8 and the two IMSI numbers 4, 9 match, then Fig. 3, the corresponding original data set 6 comprising the original IMEI number 1 and the original IMSI number 4 is supplemented by the registration data 18 of the original person 13. Furthermore, if there is a match, a means of authentication 17, in this embodiment a password, is also generated and also stored in the original data set 6. Finally, the generated means of authentication 17 is transmitted to the original person 13 via the base station 15 and the screen of the original mobile device 2. Registration is now complete.

[0029] Preferably, each time the original mobile device 2 with the SIM card 5 and the original IMSI number 4 stored thereon wishes to use the mobile network of the second computer network 11, the original mobile device 2 must register with the mobile network with the base stations 15 (see Fig. 4). The original mobile device 2 again transmits the IMEI number 8 and the IMSI number 9 to be checked to the second computer network 11.

[0030] The IMEI number 8 to be checked and the IMSI number 9 to be checked together form a data set 10 to be checked, which is compared by the second computer network 11 with the original data sets 6. If one of the original data sets 6 has the same IMEI number and the same IMSI number, the original mobile device 2 automatically receives access to the mobile network of the second computer network 11, and payload data 19 can now be exchanged between the original mobile device 2 and the mobile network or base station 15 of the second computer network 11. If, however, no match is found, and thus either the two IMEI numbers 1, 8 or the two IMSI numbers 4, 9 do not match, the mobile device 2 does not automatically receive access to the mobile network.

[0031] In the Fig. 5 shows the case where the original person 13 has inserted the SIM card 5 into another mobile device 12 and thus into an unregistered mobile device. As soon as the other mobile device 12 wants to exchange data with the mobile network or a base station 15 of the second computer network 11, a comparison is carried out according to Fig. 4, it has been determined that an IMEI number 8' of the additional mobile device 12 to be checked does not correspond to any of the original IMEI numbers 1 from the database 14. Conveniently, the original person 13 receives a message 20 on the additional mobile device 12, stating that this additional mobile device 12 has not yet been registered. Advantageously, said message 20 also offers the original person 13 the opportunity to subsequently register the additional mobile device 12.

[0032] To this end, the original person 13 can enter the means of authentication 17 (password) into a corresponding text field, so that the means of authentication 17, the IMEI number 8' to be verified of the additional mobile device 12, and the IMSI number 9 to be verified in the form of the original IMSI number 4 are transmitted to the second computer network 11. The second computer network 11 determines a match between the IMSI number 9 to be verified and the original IMSI number 4, as well as a match between the entered and the stored means of authentication 17. A further data set 16 comprising the original IMSI number 4 and the IMEI number 8' to be verified of the additional mobile device 12, along with the means of authentication 17 and the registration data 18, is then stored. The original person 13 can then also use the low-cost tariff with the additional mobile device 12.The option to subsequently register additional mobile devices 12 represents a purely personal restriction on access to the mobile network and is therefore somewhat less strict than the person- and device-specific restriction. However, it is possible, for example, to only allow one additional mobile device 12 per original person 13.

[0033] In addition to the Fig. In addition to the case variant illustrated in Figure 5, of solely person-specific access restriction, the method according to the invention also makes it possible to restrict access solely on a device-specific basis. For example, the original person 13 can sell the original mobile device 2, along with the SIM card 5 and the original IMSI number 4 stored thereon, to another person and simultaneously cancel the specific or favorable tariff. As soon as the additional person has inserted the SIM card 5 into the original mobile device 2 for the first time and the latter has been switched on, the original mobile device 2 will log on to the mobile network of the second computer network 11. The second computer network 11 will then determine that a match exists, but the specific or favorable or original tariff has been canceled.However, according to this variant, the additional person can, for example with the help of the means of authentication 17 transmitted by the original person 13, register himself - analogous to the subsequent registration from . Fig. 5 - re-register and enter into a corresponding contract for the use of a specific tariff.

Claims

[1] Method for person- and / or device-related access restriction of mobile radio networks, wherein at least one original IMEI number (1) is stored on each original mobile radio device (2), wherein a first computer network (3) manages the transfer of the original mobile radio devices (2) to original persons (13), wherein each original person (13) is assigned an original IMSI number (4), wherein the original IMSI numbers (4) are each stored on a SIM card (5), wherein the SIM cards (5) assigned to the original persons (13) each enable mobile radio usage at a specific tariff, wherein the original IMEI numbers of the mobile radio devices (2) provided to the original persons (13) are assigned to the respective original IMSI numbers (4) of the original persons (13), so that a plurality of original data records (6) comprising one of the original IMEI numbers (1) and one of the original IMSI numbers (4) is formed, wherein at least some of the original data records (6) are stored in a database (7, 14), characterized by , that the first computer network (3) - before the original mobile radio devices (2) are handed over to the original persons (13) - transmits the original data records (6) to a second computer network (11), wherein the second computer network (11) registers the original persons (13). [2] Method according to claim 1, wherein during a registration and / or a registration of an initially unknown mobile device (2, 12) for the purpose of using the mobile network, an IMEI number (8) to be checked and an IMSI number (9) to be checked are transmitted and form a data record (10) to be checked, wherein it is checked whether the data record (10) to be checked corresponds to one of the original data records (6) from the database (7, 14). [3] Method according to one of claims 1 or 2, wherein the second computer network (11) transmits the original IMSI numbers (4) or the SIM cards (5) to the first computer network (3) before the respective original mobile radio device (2) is handed over to the original person (13). [4] Method according to one of claims 1 to 3, wherein the original data sets (6) are formed by the first computer network (3). [5] Method according to one of claims 1 to 4, wherein the original persons (13) receive a means (17) for authentication during registration. [6] Method according to one of claims 1 to 5, wherein the initial assignment of the original data records (6) to the original persons (13) is carried out by the second computer network (11). [7] Method according to one of claims 2 to 6, wherein the checked IMSI number (9) corresponds to one of the original IMSI numbers (4), wherein the checked IMEI number (8') is assigned to a further mobile device (12) and does not correspond to any of the original IMEI numbers (1), wherein the further mobile device (12) can be registered and is then entitled to use the mobile network at one of the specific tariffs by storing the checked IMEI number (8') of the further mobile device (12) in the database (7, 14). [8] Method according to one of claims 2 to 6, wherein the checked IMEI number (8) corresponds to one of the original IMEI numbers (1), wherein the checked IMSI number is assigned to a further person and does not correspond to any of the original IMSI numbers (4), wherein the further person can be registered and is then entitled to use the mobile network at one of the specific tariffs by storing the checked IMSI number of the further person in the database (7, 14).

Images