United States Patent (19)
`Barvesten
`
`USOO594O773A
`Patent Number:
`11
`(45) Date of Patent:
`
`5,940,773
`Aug. 17, 1999
`
`54 ACCESS CONTROLLED TERMINAL AND
`METHOD FOR RENDERING
`COMMUNICATION SERVICES
`75 Inventor: Mats Olof Barvesten, Lund, Sweden
`
`73 Assignee: Ericsson Inc., Research Triangle Park,
`N.C.
`
`63
`
`21 Appl. No.: 08/529,154
`1-1.
`22 Filed:
`Sep. 15, 1995
`O
`O
`Related U.S. Application Data
`station of application No. 08/149,528, Nov. 9, 1993,
`O
`O
`Foreign Application Priority Data
`30
`Nov. 9, 1992 SE Sweden .................................. o203351
`2
`6
`51 Int. Cl. ....................................................... H04Q 7/32
`52 U.S. Cl. ....................... 455/558; 379/9101; 379/153;
`455/38.2
`58 Field of Search ................................... 455/558, 38.2;
`379/91.01, 153; 235/380
`
`56)
`
`References Cited
`U.S. PATENT DOCUMENTS
`... 379/153
`4,815,123 3/1989 McGough ...
`... 455/38.2
`5,203,014 4/1993 Wagai et al. .....
`5,266,782 11/1993 Alanara et al. ........................... 379/91
`
`FOREIGN PATENT DOCUMENTS
`O 281 728 9/1988 European Pat. Off..
`0301 740 2/1989 European Pat. Off..
`O 448 369 9/1991 European Pat. Off..
`Primary Examiner William Cumming
`Attorney, Agent, or Firm-Burns, Doane, Swecker &
`Mathis, L.L.P.
`ABSTRACT
`57
`An arrangement for rendering Services Such as for example
`telephone communication, data communication and So on
`comprising a terminal unit and an acceSS unit, the terminal
`unit comprising a terminal-unit-identification code (PIN)
`which is Stored in the terminal unit and the access unit
`comprising a first access identification code (IMSI), terminal
`unit as well as an access unit being lockable. In the terminal
`unit are furthermore first access identification codes for a
`given number of access units (SIM) stored wherein upon
`Starting up of the device involving contact between terminal
`unit and actual acceSS unit (SIM) with a certain access unit
`identification code (IMSI), identification code (IMSI) of
`the acceSS unit is compared to in the terminal unit Stored first
`access identification code(s) (IMSI) in the terminal unit,
`correspondence between Stored access identification code
`(IMSI) and actual access unit identification code (IMSI)
`leading to locking up of the terminal unit whereas non
`correspondence between Stored and actual access unit iden
`tification codes (IMSIzIMSI) respectively at least the
`terminal unit identification code (PIN) must be given.
`
`13 Claims, 2 Drawing Sheets
`
`
`
`A/SAAY
`
`4.
`
`A/CP
`A(CASS)?
`f///
`
`
`
`3
`
`--a
`
`
`
`
`
`
`
`Page 1 of 7
`
`

`

`U.S. Patent
`
`Aug. 17, 1999
`
`Sheet 1 of 2
`
`5,940,773
`
`
`
`A/SAAY
`
`A/A0
`AROCASSOP
`(W//
`
`»
`
`3
`
`A/SAf
`A/V/0/
`AA)
`
`5
`
`A/G f
`
`Page 2 of 7
`
`

`

`U.S. Patent
`
`Aug.17, 1999
`
`Sheet 2 of2
`
`5,940,773
`
`STORAGE OF
`IMS! (PINs, PIN)
`
`ACTIVATION OF
`TERMINAL UNIT
`
`FIG. 2
`
`
`ACTUAL
`
`
`
`CODE= STORED CODE?
`PIM
`IMSI= MSIs. 7
`
`ACTIVATED ?
`f*h..,0
`
`
`
`
`
`Pile
`AGTWATED ?
`
`
`YES
`
`TERMINAL UMIT
`LOCKED UP
`
`ACTUAL
`PIN
`STORED ?
`
`NO
`
`YES
`
`PICK UP PIN
`FROM STORAGE
`
`TRANSFER PIN 10 CARD
`
`GARD 1S UNLOCKED
`
`
`
`GIVE
`PIN
`
`
`
`
`
`
`
`
`TEL. WO
`TEL. NO
`NO
`
`STORED I
`STORED IW
`
`
`TERMINAL ?
`CARD 2
`
`
`
` PICK UP FROM
`
`YES
`
`PICK UP FROM STORAGE
`
`CARD -STORAGE
`
`DISPLAY TEL. WO
`
`ARRANGEMENT PREPARED
`
`Page 3 of 7
`
`Page 3 of 7
`
`

`

`5,940,773
`
`1
`ACCESS CONTROLLED TERMINAL AND
`METHOD FOR RENDERING
`COMMUNICATION SERVICES
`
`This application is a continuation of application Ser. No.
`08/149,528, filed Nov. 9, 1993, abandoned.
`
`5
`
`TECHNICAL FIELD
`The present invention relates to an arrangement for ren
`dering Services Such as telephone communication, data
`communication etc. Such arrangements may under a lot of
`circumstances easily be abused and are very attractive to
`Steal which might have Serious consequences. This is the
`case as well if e.g. the acceSS units are not lockable or are not
`locked as well as if the terminal unit is not lockable or is not
`locked So that they merely can be used by users who really
`should have access to the one or the other of the units. This
`is e.g. the case with mobile telephones where the Subscrip
`tion is not related to a particular mobile telephone or
`terminal unit but is related to a separate card. Then a
`terminal unit or a telephone may be used with any card. If
`on the other hand the acceSS unit, or the card, is not locked,
`anyone may use the card and therethrough also charge the
`Subscription. One way to Solve this problem, i.e. to protect
`the terminal unit as well as the access unit is to implement
`a "lock' in the terminal unit as well as in the access unit
`wherethrough a user has to enter a code to “unlock' the
`terminal unit and a further code to “lock up' the card and
`thus get access to the Subscription. This however is tedious
`Since two different codes have to be entered each time upon
`use which is very inconvenient, among otherS Since it may
`be difficult to remember the increasing number of codes
`which are necessary in the Society and also because it is
`annoying to, each time, which may be a large number of
`times, having to enter two codes. It is therefore very prob
`able that the user inactivates one or the other of the codes or
`in the worst case both identification codes in order to be able
`to get a quick access to his phone. The user then runs the risk
`that the device, or one of the units comprised by the device
`or arrangement, is abused or Stolen.
`
`15
`
`25
`
`35
`
`40
`
`2
`In known analogue mobile telephone Systems the Sub
`Scription is programmed into the telephone terminal. This is
`done with Special equipment and is handled by authorized
`perSonnel which is picked out and controlled by the operator,
`therefore the same problems do not arise in this case.
`SUMMARY OF THE INVENTION
`The object of the present invention is to provide an
`arrangement for rendering Services wherein a terminal unit
`as well as an access unit are Safe against thefts and may not
`easily be abused at the same time as the device is easy to use
`and in the normal case do not require a double entering of
`codes and wherein particularly advantageous no entering or
`giving of codes at all is necessary to give the owner or the
`prioritized user access to the device without the device
`therefore getting leSS Safe or protected against thefts. A
`further object with the invention is to provide an arrange
`ment which permits fast and easy access and wherein the
`Simplified acceSS may be given to one or more users depend
`ing on what is desired.
`These and other objects are achieved through an arrange
`ment for rendering Services Such as telephone
`communication, data communication, etc, comprising a
`terminal unit and an acceSS unit, the terminal unit compris
`ing terminal unit identification means (PIN) being Stored in
`the terminal unit and the access unit comprising first acceSS
`unit-identification means (IMSI) in the form of a code or
`Similar, terminal unit as well as access unit being lockable,
`wherein in the terminal unit furthermore are stored first
`access-unit-identification means (IMSI) for a given num
`ber (n) of access units (SIM), wherein upon starting up of the
`arrangement involving contact between the terminal unit and
`an access unit (SIM) with a certain access-unit-identification
`means (IMSI), the code of the identification means (IMSI)
`of the acceSS unit is compared with in the terminal unit
`stored code(s) for access-unit-identification means (IMSI.
`i), wherein correspondence between Stored access-unit
`identification means (IMSI) and actual access-unit
`identification means (IMSI) leads to locking up of the
`terminal unit whereas upon non-correspondence between
`Stored and actual acceSS-unit-identification means at least
`the terminal-unit-identification code (PIN) is to be given.
`In one aspect of the invention a Second acceSS-unit
`identification means (PIN) of the access unit (SIM) can be
`activated or inactivated, i.e. a personal identification number
`of the card. If the actual access identification code (IMSI)
`does not correspond to any first acceSS-unit-identification
`code (IMSI) stored in the storage of the terminal unit and
`if the Second acceSS-unit-identification means are activated
`and comprises a code (PIN), this code has to be given to
`lock up or activate the actual access unit.
`This code, PIN could e.g. be given manually by the user.
`In another aspect of the invention may also the Second
`access-unit-identification means (PIN) be stored in the
`terminal unit. If then the actual first access identification
`code corresponds to a Stored access identification means
`(IMSI =IMSI), the terminal unit automatically transfers the
`Second access-unit-identification means (PIN) to the access
`unit So that the arrangement can be used without the Second
`access-unit-identification code (PIN) having to be given by
`the user.
`In one aspect of the invention, and if the Second access
`unit-identification means (PIN) are not stored in the termi
`nal unit, correspondence between in the terminal unit Stored
`first access-unit-identification and the actual access-unit
`identification means, the acceSS unit is locked up through the
`giving of PIN, i.e. the Second acceSS-unit-identification
`means/code.
`
`STATE OF THE ART
`Devices as referred to above are known in the prior art but
`as mentioned above they suffer the drawback that either two
`different codes have to be entered upon every activation of
`the terminal or it is simply not bothered to lock e.g. the
`terminal, but also in Some cases, the card or the access unit.
`This is for example the case with the digital GSM-system.
`In this System the Subscription is on a separate So called
`SIM-card (Subscriber Identity Module). In this case the
`terminal unit, or the telephone, is very attractive for Stealing
`since the SIM-card which should have access to the tele
`phone simply can be exchanged through another SIM-card
`and therethrough the telephone may be used freely by users
`who should not have access to the, in this case, telephone.
`This is particularly the case when the terminal units are
`intended to be used by a particular user or a particular group
`of users or when the terminal quite Simply is Stolen. In the
`known device the acceSS unit, or the SIM-card, comprises a
`so called PIN-code (Personal Identification Number)
`whereas the terminal unit, or the telephone, in turn com
`prises another PIN-code so that in order to get a full
`protection of terminal unit (telephone) as well as access unit
`(card), both codes must be entered at every activation of the
`terminal unit or the telephone. This leads consequently to a
`very awkward handling of the device.
`
`45
`
`50
`
`55
`
`60
`
`65
`
`Page 4 of 7
`
`

`

`5,940,773
`
`15
`
`25
`
`35
`
`40
`
`3
`In a further aspect of the invention and with non
`correspondence between Stored and actual first access-unit
`identification code, the terminal unit as well as the acceSS
`unit are unlocked or activated if either the terminal
`identification code or the Second access-unit-identification
`code is given.
`In Still another aspect, non correspondence between
`Stored and actual first acceSS-unit-identification codes
`(IMSIzIMSI) both the terminal identification code (PIN)
`and the second access-identification-code (PIN) have to be
`given for activation of the arrangement.
`In one aspect of the invention, the terminal unit comprises
`a mobile telephone, and particularly the acceSS unit com
`prises a card.
`More particularly even, the access unit comprises a Sub
`scriber Identity Module-card which defines the subscription
`of the mobile telephone.
`In a further aspect of the invention the first acceSS-unit
`identification code of at least one Subscription which should
`have access to the terminal unit (or telephone unit) is stored
`in the terminal unit, where in the first acceSS-unit
`identification code e.g. is stored in an EEPROM-storage in
`a manner known per Se, whole of it, part of it, ciphered,
`random number generated with rest or Similar.
`In yet another aspect of the invention one or Several
`further access-unit-identification codes are Stored in the
`Storage of the terminal unit, partly, as a whole, ciphered or
`Similar.
`In Still another aspect of the invention at least one Second
`access-unit-identification code is Stored, ciphered or Similar
`in a Storage in the terminal unit.
`In a further aspect of the invention the storing of the first
`access-unit-identification code takes place automatically or
`in yet another aspect of the invention manually via e.g. a
`pushbutton device or Similar.
`In one aspect of the invention at least one Second acceSS
`identification code is Stored in a Storage in the terminal unit
`in a way Similar to the Storing of the first access unit
`identification code.
`In Still another aspect of the invention at least one to an
`access unit belonging telephone number is Stored in a
`terminal Storage or in a Storage in the card So that this is
`picked up from the Storage and shown on a display when the
`arrangement is unlocked.
`Another aspect of the invention relates to an arrangement
`through which it is possible to, if So desired, obtain infor
`mation about identification number (for example telephone
`number) or codes belonging to access units which have been
`acceded simplified access.
`BRIEF DESCRIPTION OF THE DRAWINGS
`The invention will in the following be further described
`with reference to the accompanying drawings in an explana
`tory and by no means limiting way, wherein
`FIG. 1 schematically illustrates a terminal unit and an
`access unit in the form of a telephone with a card,
`FIG. 2 schematically illustrates an example of a flow
`diagram with Steps which are gone through upon activation
`of the terminal for “locking up' of terminal unit as well as
`access unit (in the illustrated case a telephone and a card).
`DETAILED DESCRIPTION OF THE
`INVENTION
`In the embodiment shown in FIG. 1 a device or an
`arrangement 10 is shown wherein the terminal unit com
`
`45
`
`50
`
`55
`
`60
`
`65
`
`4
`prises a mobile telephone 1 and the acceSS unit comprises an
`electronic card 2 comprising the Subscription. The device
`furthermore comprises a push button means 5, a memory 3
`and a micro-processor unit 4. In the display 6 among others
`telephone numbers are shown. In the shown embodiment the
`device refers to the cellular so called GSM-mobile telephone
`system, particularly the CME 20-system (Ericsson). In this
`context it is also referred to recommendation GSM 11.11. In
`the shown embodiment the card 2 with an electronic
`memory comprises a so called SIM-card (Subscriber Iden
`tity Module) further described in Recommendation GSM
`02.17 which contains the information which
`un-ambiguously identifies the subscriber. In the SIM-card 2
`the so called IMSI-code (International Mobile Subscriber
`Identity) is stored. A mobile station, MS, which for example
`may be a Station mounted on a vehicle, a portable Station or
`a hand carried station may only be used if a valid IMSI-code
`is present. In the cases when the terminal unit or the
`telephone 1 is not locked or secured by a so called EIR
`register (Equipment Identity Register) (not yet in use) which
`in one way can be seen as a different alternative to the
`present invention as theft protection is concerned, it would
`be easy to abuse or Steal the terminal unit or the telephone
`1. Upon Starting up or activation of the telephone 1, the
`telephone 1 and the SIM-card 2 communicate with each
`other. The IMSI-code for the SIM-card(-s) 2 is (are) to be
`stored in a memory in the phone, e.g. in an EEPROM
`storage. The IMSI-code may then be stored in a number of
`different ways which are known per se, e.g. the whole of it,
`partly, non-ciphered or ciphered or random numbered gen
`erated with calculation of rest or any other method. The
`Storing may take place either automatically or manually.
`According to an advantageous embodiment of the invention
`it is possible to, apart from Storing of the identity of the own
`SIM-card, i.e. its IMSI-code, also store the IMSI-codes of a
`number of other SIM-cards which should have a simplified
`or prioritized access to the terminal unit or the telephone 1.
`Particularly under reference to the flow diagram of FIG.
`2 the sequence will in the following be described wherein,
`after one or more IMSI-codes have been stored in a storage
`of a terminal unit as well as possibly also PIN, and PIN.
`-codes, the terminal is activated or Started up wherein a
`number of different possibilities are possible depending on
`the actual IMSI-code having been stored or not.
`Upon activation of the telephone, wherein either a card
`already is present in the telephone 1 or a new one has been
`introduced, the actual IMSI-code is sent to the telephone 1
`(according to the GSM-recommendation) via the micropro
`ceSSor 4, as Stated above, where it is compared to in the
`telephone 1 stored IMSI-code(s). If IMSI corresponds to
`any IMSI-code being stored in the telephone 1, the tele
`phone is started up without requiring any further measure to
`be taken or without asking for any further code. If on the
`other hand there is no correspondence between the codes,
`the telephone 1 demands a PIN-code for the terminal unit or
`the telephone 1.
`Thus, on every occasion of activation of the telephone 1,
`in the storage 3 stored code(s) (IMSI) are compared with
`received code (IMSI) of the actual SIM-card. A so called
`PIN-code for the SIM-card may likewise be stored in the
`storage 3 in a way similar to that of the IMSI-code(s). In the
`Storage 3 of the terminal unit (telephone) are one or more
`IMSI-codes stored and also a PIN, i.e. a Personal Identifi
`cation Number for the terminal. According to different
`embodiments may furthermore PIN of those cards whose
`IMSI-code(s) have been stored, be stored therein as well as
`a telephone number for the corresponding Subscription. This
`
`Page 5 of 7
`
`

`

`25
`
`S
`is however dependent on desires and requirements and
`provisions and merely indicate advantageous embodiments.
`Now returning to the case wherein the actual IMSI-code
`does correspond to the stored IMSI-code and the terminal
`is locked up. It is thereafter investigated if the actual
`PIN-code of the card is stored. If yes, the PIN-code of the
`actual card is picked up from the Storage 3 whereupon it is
`transmitted to the card 2 which thereafter is locked up and
`then the telephone 1 as well as the card (access unit) 2 are
`unlocked and the device 10 is as far as locking is concerned
`ready to be used or open for communication. In this case,
`consequently, no entering of any code is required of the user.
`(If PIN is stored (and activated), this code is requested and
`will then have to be entered or given).
`If however the actual IMSI-code does not correspond to
`any stored IMSI-code the terminal unit 1 or the telephone
`1 requests a PIN-code for the terminal. When this code is
`given the terminal 1 is unlocked. Thereafter is asked if the
`PIN-code for the card is activated. If not, the card is already
`unlocked and thus was not locked. If yes, the PIN-code is
`requested and when this is given, the card is locked up and
`the device is ready to be used as far as locking is concerned.
`If on the other hand the actual IMSI-code has corresponded
`to a stored IMSI-code it is also possible that the PIN-code
`of the actual card has not been stored. The terminal is in this
`case, as already mentioned above, already unlocked. Then it
`is examined if any PIN-code for the card is activated. If yes,
`this is given whereupon the card is locked up. If not, the card
`consequently has not been locked and is therefore already
`unlocked and the device is ready to be used as far as locking
`is concerned. Thus it is possible for an authorized user, i.e.
`a user who should have access to telephone as well as to card
`not to enter any code at all but that the card as well as the
`terminal are unlocked automatically. If however the actual
`IMSI-code has not been stored in the terminal it is possible
`to get access by entering PIN-codes for terminal and card.
`Eventually these codes could be associated with each other
`and for example consist of one and the same code.
`According to a preferred embodiment at least one IMSI
`code as well as also PIN-codes for card as well as for
`40
`terminal are Stored in the Storage memory. To avoid the
`storage of the PIN-code of the card it might also be possible,
`as mentioned above, to associate this with the PIN-code of
`the terminal. According to a preferred embodiment is how
`ever the PIN-code of the card stored in a ciphered form in
`45
`the memory 3.
`The cards may for example comprise cards with an
`electronical memory but also cards with a magnetical
`memory or other alternatives are possible.
`According to a preferred embodiment it is possible, in
`case the IMSI-code of an actual card is Stored in the Storage
`3 of the terminal 1, to show for example the telephone
`number of the actual subscription or the SIM-card which can
`be useful since this in no other way is visible. Then it is
`examined, after unlocking of the card, if the telephone
`number of the card is stored in the terminal. If this is the
`case, it is picked up from the Storage and is shown on the
`display 6. If the telephone number is not stored in the
`terminal it is examined if the telephone number is Stored in
`the card. If this is the case, the telephone number is picked
`up from the Storage and is also shown on the display 6. If the
`telephone number is not stored, no display takes place. The
`display of telephone numbers is advantageous Since the
`telephone number in no other way is visible, neither on the
`terminal unit or on the card and if a user for example has
`several cards it may be difficult to remember the number as
`it is often difficult to remember the own number. This is the
`
`50
`
`55
`
`60
`
`65
`
`5,940,773
`
`15
`
`35
`
`6
`case both if one or more telephone numbers is/are connected
`to stored IMSI-codes.
`It is furthermore possible to carry out the Storage of
`different codes (IMSI, PIN) in the storage 3, either manually
`or automatically. With manual Storing it could for example
`be effected by a so called push button device 5 or similar.
`Furthermore, it should be possible to change Stored codes as
`well as to delete codes or add codes.
`The invention shall of course not be limited to the shown
`embodiments and does not have to be a mobile telephone but
`it is related to every device rendering Services, e.g. devices
`for data communication or others comprising a terminal unit
`and an access unit which e.g. may comprise a Subscription
`or similar and where it is desirable to Secure the units
`forming part of the device against theft and abuse. A device
`may also comprise more than two units. The invention is
`limited to the shown embodiments but can be freely varied
`within the Scope of the claims.
`I claim:
`1. An arrangement for rendering Services comprising:
`an access unit having a first acceSS-unit-identification
`means, Said acceSS unit being lockable;
`a terminal unit having Storage means for Storing a
`terminal-unit-identification means and for Storing a
`plurality of first access-unit-identification means, Said
`terminal unit being lockable, Said terminal unit having
`comparison means wherein upon start-up of Said
`arrangement and contact between Said access unit and
`Said terminal unit, Said first acceSS-unit-identification
`means of Said acceSS unit is compared to Said first
`acceSS-unit-identification means of Said access unit is
`compared to Said first access-unit-identification means
`Stored in Said terminal unit Storage means, and corre
`spondence between Said first acceSS-unit-identification
`means of Said acceSS unit and at least one of Said first
`acceSS-unit-identification means Stored in Said terminal
`unit Storage means provides locking up of Said terminal
`unit, and non-correspondence between Said first access
`unit-identification means of Said access unit and Said
`first access-unit-identification means Stored in Said ter
`minal unit Storage means allows a code corresponding
`to Said terminal-unit-identification means to be given,
`wherein Said access unit further comprises a Second
`acceSS-unit-identification means and Said terminal unit
`Storage means further Stores a Second access-unit
`identification means wherein upon correspondence
`between Said first acceSS-unit-identification means of
`Said acceSS unit and at least one of Said first access
`unit-identification means Stored in Said terminal unit
`Storage means, a code corresponding to Said Second
`acceSS-unit-identification means Stored in Said terminal
`unit Storage means is automatically transferred to Said
`Second acceSS-unit-identification means of Said access
`unit and use of the arrangement is allowed without
`requiring a user to manually provide Said code.
`2. An arrangement for rendering Services comprising:
`an access unit having a first acceSS-unit-identification
`means, Said acceSS unit being lockable;
`a terminal unit having Storage means for Storing a
`terminal-unit-identification means and for Storing a
`plurality of first access-unit-identification means, Said
`terminal unit being lockable, Said terminal unit having
`comparison means wherein upon start-up of Said
`arrangement and contact between Said access unit and
`Said terminal unit, Said first acceSS-unit-identification
`means of Said acceSS unit is compared to Said first
`
`Page 6 of 7
`
`

`

`7
`acceSS-unit-identification means Stored in Said terminal
`unit Storage means, and correspondence between Said
`first access-unit-identification means of Said access unit
`and at least one of Said first access-unit-identification
`means Stored in Said terminal unit Storage means pro
`vides locking up of Said terminal unit, and non
`correspondence between Said first acceSS-unit
`identification means of Said acceSS unit and Said first
`acceSS-unit-identification means Stored in Said terminal
`unit Storage means allows a code corresponding to Said
`terminal-unit-identification means to be given,
`wherein Said acceSS unit further comprises an activatable
`Second access-unit-identification means, wherein Said
`Second acceSS-unit-identification means is not Stored in
`Said terminal unit Storage means and upon correspon
`dence between Said first access-unit-identification
`means of Said acceSS unit and at least one of Said first
`acceSS-unit-identification means Stored in Said terminal
`unit Storage means, the acceSS unit is locked up by
`entering a code corresponding to Said Second access
`unit-identification means of Said acceSS unit.
`3. The arrangement of claim 2 wherein if said first
`access-unit-identification means of Said access unit does not
`correspond to at least one of Said first access-unit
`identification means Stored in Said terminal unit Storage
`means, Said Second access-unit-identification means is acti
`Vated and a code corresponding to Said Second access-unit
`identification means must be provided to lock up said
`terminal unit.
`4. The arrangement of claim 3 wherein Said code corre
`sponding to Said Second acceSS-unit-identification means is
`provided manually by a user.
`5. The arrangement of claim 1 wherein upon non
`correspondence between Said first access-unit-identification
`means of Said acceSS unit and Said first access-unit
`identification means Stored in Said terminal unit Storage
`means, Said access unit and Said terminal unit are locked up
`upon a user providing a code corresponding to Said terminal
`unit-identification means.
`6. The arrangement of claim 1 wherein upon non
`correspondence between Said first access-unit-identification
`means of Said acceSS unit and Said first access-unit
`identification means Stored in Said terminal unit Storage
`means, Said access unit and Said terminal unit are locked up
`upon a user providing both a code corresponding to Said
`terminal-unit-identification means and a code corresponding
`to a Second access-unit-identification means of Said acceSS
`unit.
`7. The arrangement of claim 1 wherein said terminal unit
`comprise a mobile telephone.
`8. The arrangement of claim 7 wherein Said access unit
`comprises a Subscriber Identity Module card defining a
`Subscription of Said mobile telephone.
`9. The arrangement of claim 1 wherein Said first access
`unit-identification means Stored in Said terminal unit Storage
`means is Stored in a ciphered format.
`10. The arrangement of claim 9 wherein said second
`access-unit-identification means Stored in Said terminal unit
`Storage means is Stored in a ciphered format.
`11. The arrangement of claim 9 wherein said first access
`unit-identification means Stored in Said terminal unit Storage
`means is Stored automatically.
`12. A method for Securing the use of an arrangement for
`rendering Services having a terminal unit and at least one
`access unit, comprising the Steps of:
`
`1O
`
`15
`
`25
`
`35
`
`40
`
`45
`
`50
`
`55
`
`60
`
`5,940,773
`
`8
`Storing a terminal-unit-identification means and a plural
`ity of first access-unit-identification means and Second
`acceSS-unit identification means in Said terminal unit;
`Storing at least one first access-unit-identification
`means and Second acceSS-unit-identification means in
`each Said access unit;
`contacting Said terminal unit to Said access unit;
`comparing Said first acceSS-unit identification means of
`Said acceSS unit to Said first acceSS-unit-identification
`means of Said terminal unit and locking up Said termi
`nal unit when Said first access-unit identification means
`of Said access unit corresponds to at least one of Said
`first access-unit-identification means of Said terminal
`unit,
`wherein upon correspondence between Said first access
`unit-identification means of Said access unit and at least
`one of Said first access-unit-identification means Stored
`in Said terminal unit, a code corresponding to Said
`Second access-unit-identification means Stored in Said
`terminal unit is automatically transferred to Said Second
`acceSS-unit-identification means of Said acceSS unit and
`use of the arrangement is allowed without requiring a
`user to manually provide Said code.
`13. An arrangement for rendering Services comprising:
`an access unit having a first acceSS-unit-identification
`means and a Second access-unit-identification means,
`Said access unit being lockable;
`a terminal unit having Storage means for Storing a
`terminal-unit-identification means and for Storing a
`plurality of first access-unit-identification means, Said
`terminal unit being lockable, said terminal unit having
`comparison means wherein upon start-up of Said
`arrangement and contact between Said access unit and
`Said terminal unit, Said first acceSS-unit-identification
`means of Said acceSS unit is compared to Said first
`acceSS-unit-identification means Stored in Said terminal
`unit Storage means, and correspondence between Said
`first acceSS-unit-identification means of Said access unit
`and at least one of Said first acceSS-unit-identification
`means Stored in Said terminal unit Storage means pro
`vides locking up of Said terminal unit,
`wherein upon non-correspondence between said first
`acceSS-unit-identification means of Said acceSS unit and
`Said first acceSS-unit-identification means Stored in Said
`terminal unit Storage means, said acceSS unit and Said
`terminal unit are locked up upon a user providing both
`a code corresponding to Said terminal-unit
`identification means and a code corresponding to Said
`Second acceSS-unit-identification means of Said access
`unit, and
`wherein upon correspondence between Said first access
`unit-identification means of Said access unit and Said
`first access-unit-identification means Stored in Said ter
`minal unit Storage means, a code corresponding to Said
`Second access-unit-identification means Stored in Said
`terminal unit Storage means is automatically transferred
`to Said Second access-unit-identification means of Said
`acceSS unit and use of the arrangement is allowed
`without requiring a user to manually provide Said code.
`
`Page 7 of 7
`
`