Title of Invention	"A METHOD OR DEVICE FOR ENHANCING THE SECURITY OF A VOICEMAIL SYSTEM"
Abstract	A communication device (and its related method of operation), when accessing password protected voicemail services, may invoke an enhanced security feature which effectively masks at least the password digit values from being discernible by feedback to the user. This is especially important where portable wireless communication devices may have pre-stored password data for use with automated voicemail access - even in a "locked" mode. Unauthorized possessors of such a device might utilize conventional audible feedback during password transmission to decipher the password value. However, such lack of security is avoided by masking the password data values from the audible and/or visual user feedback, if any.

Title of Invention

"A METHOD OR DEVICE FOR ENHANCING THE SECURITY OF A VOICEMAIL SYSTEM"

Abstract

A communication device (and its related method of operation), when accessing password protected voicemail services, may invoke an enhanced security feature which effectively masks at least the password digit values from being discernible by feedback to the user. This is especially important where portable wireless communication devices may have pre-stored password data for use with automated voicemail access - even in a "locked" mode. Unauthorized possessors of such a device might utilize conventional audible feedback during password transmission to decipher the password value. However, such lack of security is avoided by masking the password data values from the audible and/or visual user feedback, if any.

Full Text	ENHANCED SECURITY FOR VOICE MAIL PASSWORDS Background of the invention 1 Field of the Invention This invention generally relates to communication devices having access to password-protected voicemail services It is especially useful for mobile wireless communication devices having stored password data for automated use with automated voicemail access capability 2 Related Art Voicemail facihties are now a well known feature of virtually all telephone systems Most voicemail services are password protected such that access even by an authorized user is only permitted if a predefined secret password is appropriately entered Mobile or wireless communication devices may also be used to access such voicemail facilities Often, such portable wireless communication devices mclude the ability to pre-store the telephone number utilized for access to the voicemail features - quite often including the requisite password data (e g, as an appendage to the access telephone number or as a second pseudo-telephone number to be dialed in succession after a connection has been established to the voicemail facility via the first telephone number) Of course, voicemail facilities can also be manually accessed by user manipulation of the usual keyboard - including entry of the requisite password for access to voicemail data It is typical and conventional for audible feedback to be provided to the user of such communication devices Typically, a distinctly discernible tone is generated and made audible to the user for each digit of the access telephone number and password Quite often, the audible feedback may be the usual DTMF tones that were traditionally used for transmitting key stroke data from a user to a telephone switch facility in a traditional POTS If alternate feedback audible tones are utilized, they have also conventionally been uniquely associated with particular digit values That is, there has traditionally been a one-to-one unique correspondence between a given tone frequency (or combination of frequencies in the case of DTMF tones) and a particular digit value being keyed manually or automatically transmitted If a portable (1 e , wireless) communication device includes an automated voicemail access feature (including the required password), then an unauthonzed user (e g, a pickpocket or attacker) may obtain possession of the device and make unauthorized phone calls - including unauthonzed access to voicemail services In doing so, if there is some humanly detectable feedback that identifies the values of the password data being transmitted, then the unauthonzed user may learn the value of the secret password dunng a penod of unauthonzed possession If so, such information may even be obtained without the legitimate user knowing that such unauthonzed access has taken place and thus present a secunty nsk for future password protected voicemail services For example, the unauthonzed user might use an audio recorder to simply record the sequence of tones and then, knowing the unique correspondence between tone frequency and digit values, play back the recorded tones to ascertain the voicemail password value Published US patent application US 2002/0076039 Al is directed towards jamming DTMF password tones reflected from a remote answenng machine by inserting suitable jamming signals at the remote answenng machine site This technique is used to foil eavesdroppers on the telephone line or cellular network that may be listening to reflected return signals from the remote answering machine However, this approach does not at all address the problem of providing local protection to the password data caused by local user-feedback generated locally at the device where the password is entered For at least such reasons, enhanced secunty for voicemail passwords is desirable Bnef summary of the invention We have now recognized that such voicemail password secunty problems can be substantially avoided by sending the voicemail password data without providing humanly detectable feedback that identifies the value(s) of the password data In the exemplary embodiment, this enhanced secunty can be achieved in at least one of the following ways (a) do not provide any humanly detectable feedback while entenng the password, (b) provide humanly detectable feedback via an audible sound mat does not uniquely correspond to the sent values of the password data (e g, the same tone frequency could be used for each digit of the number entered), (c) a randomly selected tone frequency (or frequencies) may be used for audible feedback, and (d) a fixed, predetermined, sequence of tone frequencies may be employed for audible feedback regardless of what the password value might be (e g , each separate device might even have different pre-programmed tone sequences to be played) While one or more of these or different masking schemes might be utilized for the entire telephone number and password entry (whether or manual or pre-stored and automatic), we are primarily concerned with using such masking schemes for at least the voicemail password Masked visual feedback may be provided - either alone or m combination with masked audible feedback For example, as each password digit is being sent, a masking visual character not uniquely corresponding to the actual digit value (e g, an asterisk) might be displayed to represent sending of a password digit Various different visual feedback masking schemes may also be defined analogously to the audible masking schemes noted above An option for centralized control of plural communication devices with respect to implementation of one of plural possible data value masking schemes may also be provided Of course, the device may be configured to have only one such masking scheme and avoid any choice at all Alternatively, the user may be permitted to choose if more than one such masking scheme is implemented and made available This invention may be embodied in hardware, software or a combination of hardware and software The exemplary embodiment is realized entirely by executable computer program code which may be embodied in physical program memory media of conventional wireless communication devices Bnef description of the drawings These and other objects and advantages of this invention will be better understood and appreciated in conjunction with the following detailed description of exemplary embodiments taken together with the accompanying drawings, of which FIG 1 is an overall system wide schematic view of an exemplary wireless email communication system incorporating a mobile wireless communication device with enhanced security for voicemail passwords in accordance with one exemplary embodiment of this invention, FIG 2 is an abbreviated schematic diagram of hardware included within an exemplary mobile wireless communication device, FIG 3 is an exemplary abbreviated schematic flow diagram of a device control program logic that may be utilized with the mobile communication device of FIG 2, FIG 4 is an exemplary abbreviated schematic flow chart of computer software (l e, program logic) that may be utilized in the device of FIG 2 to provide enhanced security for at least voicemail passwords, FIG 5 is an exemplary abbreviated schematic flow chart of computer software (I e, program logic) that may be utilized in the device of FIG 2 to provide an option for centralized control over the voicemail password masking scheme to be implemented in a plurality of communication devices, FIG 6 is an exemplary representation of a possible screen for a locked communication device having content protection features enabled, FIG 7 is an exemplary representation of a screen display for a locked communication device nevertheless permitting telephone calls to be made, and FIG 8 is an exemplary representation of a possible screen display for a locked communication device which nevertheless provides for a menu permitting calls to voicemail to be made Detailed description of the EXEMPLARY EMBODIMENTS FIG 1 is an overview of an exemplary communication system in which a wireless communication device 100 may be used in accordance with this invention One skilled in the art will appreciate that there may be hundreds of different system topologies There may also be many message senders and recipients The simple exemplary system shown in FIG 1 is for illustrative purposes only, and shows perhaps the currently most prevalent Internet email environment FIG 1 shows an email sender 10, the Internet 12, a message server system 14, a wireless gateway 16, wireless infrastructure 18, a wireless network 20 and a mobile communication device 100 An email sender 10 may, for example, be connected to an ISP (Internet Service Provider) on which a user of the system has an account, located within a company, possibly connected to a local area network (LAN), and connected to the Internet 12, or connected to the Internet 12 through a large ASP (Application Service Provider) such as Amenca Onhne ™ (AOL) Those skilled in the art will appreciate that the systems shown in FIG 1 may instead be connected to a wide area network (WAN) other than the Internet, although email transfers are commonly accomplished through Internet-connected arrangements as shown in FIG 1 The message server 14 may be implemented, for example, on a network computer within the firewall of a corporation, a computer within an ISP or ASP system or the like, and acts as the main interface for email exchange over the Internet 12 Although other messaging systems might not require a message server system 14, a mobile device 100 configured for receiving and possibly sending email will normally be associated with an account on a message server Perhaps the two most common message servers are Microsoft Exchange™ and Lotus Domino™ These products are often used in conjunction with Internet mail routers that route and dehver mail These intermediate components are not shown in FIG 1, as they do not directly play a role in the invention descnbed below Message servers such as server 14 typically extend beyond just email sending and receiving, They also include dynamic database storage engines that have predefined database formats for data like calendars, to-do lists, task lists, email and documentation The wireless gateway 16 and infrastructure 18 provide a link between the Internet 12 and wireless network 20 The wireless infrastructure 18 determines the most likely network for locating a given user and tracks the users as they roam between countries or networks A message is then delivered to the mobile device 100 via wireless transmission, typically at a radio frequency (RF), from a base station in the wireless network 20 to the mobile device 100 The particular network 20 may be virtually any wireless network over which messages may be exchanged with a mobile communication device As shown in FIG 1, a composed email message 22 is sent by the email sender 10, located somewhere on the Internet 12 This message 22 typically uses traditional Simple Mail Transfer Protocol (SMTP), RFC 822 headers and Multipurpose Internet Mail Extension (MIME) body parts to define the format of the mail message These techniques are all well known to those skilled in the art The message 22 arrives at the message server 14 and is normally stored in a message store Most known messaging systems support a so-called "pull" message access scheme, wherein the mobile device 100 must request that stored messages be forwarded by the message server to the mobile device 100 Some systems provide for automatic routing of such messages which are addressed using a specific email address associated with the mobile device 100 In a preferred embodiment, messages addressed to a message server account associated with a host system such as a home computer or office computer which belongs to the user of a mobile device 100 are redirected from the message server 14 to the mobile device 100 as they are received Regardless of the specific mechanism controlling forwarding of messages to mobile device 100, the message 22, or possibly a translated or reformatted version thereof, is sent to wireless gateway 16 The wireless infrastructure 18 includes a series of connections to wireless network 20 These connections could be Integrated Services Digital Network (ISDN), Frame Relay or Tl connections using the TCP/IP protocol used throughout the Internet As used herein, the term "wireless network" is intended to include three different types of networks, those being (1) data-centric wireless networks, (2) voice-centric wireless networks and (3) dual-mode networks that can support both voice and data communications over the same physical base stations Combined dual-mode networks include, but are not limited to, (1) Code Division Multiple Access (CDMA) networks, (2) the Group Special Mobile or the Glbal System for Mobile Communications (GSM) and the General Packet Radio Service (GPRS) networks, and (3) future third-generation (3G) networks like Enhanced Data-rates for Global Evolution (EDGE) and Universal Mobile Telecommunications Systems (UMTS) Some older examples of data-centric network include the Mobitex™ Radio Network and the DataTAC™ Radio Network Examples of older voice-centnc data networks include Personal Communication Systems (PCS) networks like GSM, and TDMA systems As depicted in FIG 2, mobile communication device 100 includes a suitable RF antenna 102 for wireless communication to/from wireless network 20 Conventional RF, demodulation/modulation and decoding/coding circuits 104 are provided As those skilled in the art will appreciate, such circuits can involve possibly many digital signal processors (DSPs), microprocessors, filters, analog and digital circuits and the like However, since such circuitry is well known in the art, it is not further described As will be appreciated, device 100 may be configured to operate in a public switched telephone system (PSTS) so as to permit voice telephone calls and/or to provide access to conventional voicemail services The mobile communication device 100 will also typically include a main control CPU 106 which operates under control of a stored program in program memory 108 (and which has access to data memory 110) CPU 106 communicates with a conventional keyboard 112, display 114 (e g, an LCD) and audio transducer or speaker 116 A portion of data memory 110a is available for stonng one or more voicemail (VM) access number and a corresponding password (PW) Suitable computer program executable code is stored in portions of program memory 108 to constitute the enhanced security for at least the stored VM PW The control CPU 106 will typically be subject to a main control program such as depicted in FIG 3 Here, upon power up or turn on at 300, if the locked mode is not detected at 302, then continued normal operation may be permitted at 304 However, if the device is in a locked mode, then a check for an unlock request is made at 306 If an unlock request has been detected, then control may be passed to a conventional unlock routine 308 However, if the device remains in locked mode and there is no unlock request, then a check is made at 310 to see if the device has a currently enabled mode that permits calls (e g, voicemail access) to be made even in the locked mode If so, then a further test is made at 312 for a request to access voicemail If such a request is detected, then control is passed to the voicemail routine at 314 Otherwise, the loop through test elements 306,310 and 312 are continued awaiting an appropriate input As those in the art will appreciate, although the exemplary embodiment has been depicted herein (above and below) as using loop logic, it may be preferable to use interrupt event-driven logic instead for some or all such logic in an implementation on a specific hardware and/or operating system platform A possible voicemail access control logic is depicted in FIG 4 and is entered at 400 Loop counter n is initialized to a one value at 402 A test is then made at 404 to see if pre-stored autodial of voicemail access with the password has been enabled If not, then a wait loop is entered at 406 for an appropriate user keyed input of a digit of die voicemail access phone number and password As will be appreciated, the enhanced security features of FIG 4 logic may be bypassed, if desired, for the phone mail telephone access number and employed mstead only for the password transmission When a next digit D(n) is available for sending (of the voicemail telephone access number and/or the secret password), then it is transmitted at 408 in the usual and conventional way over suitable digital channels using suitable digital signaling protocol Of course, this conventional actual signaling using digital protocols and the like for a telephone switch network does not by itself provide any audible (or visual) feedback to the user Provisions for possible audible and/or visual user feedback are provided at 410 As those skilled in the art will appreciate, modern microprocessors and/or DSPs have software control tone generators (or can be programmed with suitable operatmg system or application software to provide such features) As depicted at 410 in FIG 4, one option is simply to provide no audible user feedback at all of any kind However, this option is not preferred because it is expected that some audible user feedback will be given (e g, so that the user knows that a digit has actually been transmitted over the signaling circuits) A second option at 410 is to always generate the same fixed tone T for each sent digit A third possible masking scheme depicted at 410 is to randomly select a tone using a random number RN so as to select a possibly different tone T(RN) for each successive digit Anodier possible masking scheme is depicted at 410 which provides for a fixed sequential tones T(n) to be transmitted - regardless of what value might be transmitted for the successive digits Logic for analogous masked visual feedback schemes may also be provided As will be appreciated, all of these are mere examples of masking schemes that might be used so as to send a voicemail password without providing humanly detectable feedback that identifies the value or values of the password data A suitable test is made at 412 to see if there are additional digits to be sent If so, then the loop counter n is incremented at 414 and control is passed back to the top of the loop at 404 If the complete set of digits has been transmitted, then that will be detected at 412 and the routine will be exited at 416 Of course, as those skilled in the art will appreciate, there are many conventional techniques for determining when the last digit of a sequence has been reached For example, instead of counting to an expected maximum number of digits (a number which may be set during configuration of this device for a particular telephone system interface), a wait loop may be entered to see if another digit is entered (either automatically or manually) after some predetermined period of time If not, then it may be assumed that all of the desired numbers have been entered and the routine may be exited at 416 in this manner Those skilled in the art will recognize other techniques for achieving the desired end result as well If desired, a masking scheme selection routine may be provided as depicted in FIG 5 and entered at 500 This exemplary embodiment enables a centralized control option which is tested for at 502 If present, then the masking scheme selection is only permitted to occur at 504 in response to incoming data from a central IT control department or the like so as to select (e g, one of the schemes a, b, c or d as depicted and described above) If the centralized control option is not enabled, then individual user inputs are accepted at 506 so as to select between one of plural possible masking schemes Exit to other processing routines is made conventionally at 508 or 510 as may be appropriate If the communication device 100 is locked (I e, content protection features are enabled), then the visual screen of the device may appear virtually blank to an unauthorized user For example, the screen might appear as depicted in FIG 6 However, if calls for voicemail are nevertheless permitted even in tins locked mode, then a user may be able to call up a menu as depicted in FIG 7 (e g , by user movement of a wheel or pressure on a key) and select an option to place a call If this option is chosen, then a screen such as depicted in FIG 8 may be provided to permit an automated voicemail access call As also shown in FIG 7, options may be provided to permit an emergency pre-programmed call or the placement of other desired telephone calls (e g, for voicemail access - perhaps pre-programmed and automated or manually implemented) If the device user has the option to enable a feature which allows him or her to make a phone call from the locked screen without logging into their device, this allows an attacker to pickpocket the user's device and make phone calls Users that enable this feature have to take this nsk However, without our invention, this also makes a user's pre-stored voicemail password easily accessible when the device has been stolen — even while it is locked For example, without our invention, an attacker just has to dial (i e, select) a pre-programmed voicemail number, and when the password (access number) is automatically entered by the system, record the tones If the tones are unique to each number (as they are conventionally) by playing back the recorded tones the attacker can ascertain the user's voicemail password However, as descnbed above, our exemplary embodiment provides four solutions to this problem a) don't play any tones while automatically entenng the password, b) play a constant tone while automatically entenng the password (e g, the same tone would be played for each digit entered, c) play a random tone while automatically entenng the password (e g , choose a new random tone for each number entered), and/or d) play a fixed predetermined sequence of tones while automatically entenng the password (e g , always play the same sequence of tones regardless of what the password digit value sequence is) - each device may even have a different preprogrammed tone sequence that is played When setting up voicemail dialing, a user may be required to enter two values One is a "voicemail number", and the other is "additional numbers" The phone application first dials the voicemail number, and then the additional numbers Typically, the additional numbers comprise a password, and so the phone application may automatically apply tone remapping (i e, a masking scheme) when it dials the additional numbers Of course, the additional number could also comprise a phone extension, etc A central IT admmistrator may enforce which remapping scheme (1 e , a-d should be used by sending an IT policy to the device) However, it may not improve the security Conventionally an IT admmistrator may determine whether a user is or isn't allowed to dial then: voicemail from a locked screen If a device is unlocked, then the additional numbers (i e, the password) may be visible and, if so, the attacker would have access to the password visibly and therefore remapping of the tones doesn't presently provide any security in the unlocked mode However, in an implementation where the password is masked out in the options screen, then enhanced security may be enjoyed even in the unlocked mode Typically, the digits of a sent telephone number have been mapped to a uniquely corresponding tone so that when dialing, the user hears certain tones In the exemplary embodiments of this invention, that mapping is changed at least when the password is being dialed The four different exemplary mapping techniques (i e, silent, constant, random, random sequence) all provide enhanced security However, the silent option may not be user-friendly as a legitimate user doesn't know whether the password was or was not dialed While the invention has been descnbed in connection with what is presently considered to be the most practical and preferred embodiment, it is to be understood that the invention is not limited to the disclosed embodiments, but on the contrary, is intended to cover variations, modifications and equivalent arrangements included within the spirit and scope of the appended claims We claim: 1. A method for enhancing the security of a voicemail system, the method comprising: receiving incoming data from a central control, at a device (100) used to access the voicemail system, where the central control (502, 504) is remote from the device (100); selecting, based on the incoming data, a password feedback masking scheme for masking device-generated audible feedback, the password feedback masking scheme configured to prevent identification of password data entered at the device; receiving, at the device, voicemail password data input; sending, from the device, the voicemail password data; and generating at the device, according to the password feedback masking scheme, audible feedback of the voicemail password data. 2. The method as claimed in claim 1 wherein the voicemail password data includes a plurality of digits and the generating the audible feedback according to the password feedback masking scheme comprises one of: playing a common, predetermined audible feedback tone for each digit of the plurality of digits; playing a random audible feedback tone for each digit of the plurality of digits; and playing an audible feedback tone from a fixed sequence of tones for each digit of the plurality of digits. 3. The method as claimed in claim 1 comprising: providing an option permitting automated voicemail access to take place even when the device is otherwise in a locked and secure status preventing a mere possessor of the device from having access to at least some other functionality of the communication device. 4. The method as claimed in claim 1 comprising implementing the password feedback masking scheme as one of plural possible password feedback masking schemes. 5. The method as claimed in claim 1 comprising providing an option for the device to implement one of plural possible password data value masking schemes. 6. A communication device (100) providing enhanced security for a password-protected voicemail system accessed remotely by inputting a voicemail password locally at the communication device, the communication device comprising: communication circuits (104, 102) adapted to permit access to a remote voicemail facility; means (102) for receiving incoming data from a central control remote from the communication device; means for selecting (106), based on the incoming data, a password feedback masking scheme for masking device-generated audible feedback, the password feedback masking scheme configured to prevent identification of password data entered at the communication device; means (112) for receiving voicemail password data; means (106, 108, 110) for sending the voicemail password data to a remote voicemail system; and means (106, 116), responsive to receiving the voicemail password data, for generating, according to the password feedback masking scheme, audible feedback of the voicemail password data. 7. The device as claimed in claim 6 comprising: means for implementing the password feedback masking scheme selected as one of plural possible password feedback masking schemes. 8. The device as claimed in claim 7 wherein the voicemail password data includes a plurality of digits and the generating the audible feedback according to the password feedback masking scheme comprises one of: playing a common, predetermined audible feedback tone for each digit of the plurality of digits; playing a random audible feedback tone for each digit of the plurality of digits; and playing an audible feedback tone from a fixed sequence of tones for each digit of the plurality of digits. 9. The device as claimed in claim 6 comprising: means for providing an option permitting automated voicemail access to take place even when the device is otherwise in a locked and secure status preventing a mere possessor of the device from having access to at least some other functionality of the communication device.

Full Text

ENHANCED SECURITY FOR VOICE MAIL PASSWORDS Background of the invention
1 Field of the Invention
This invention generally relates to communication devices having access to password-protected voicemail services It is especially useful for mobile wireless communication devices having stored password data for automated use with automated voicemail access capability
2 Related Art
Voicemail facihties are now a well known feature of virtually all telephone systems Most voicemail services are password protected such that access even by an authorized user is only permitted if a predefined secret password is appropriately entered
Mobile or wireless communication devices may also be used to access such voicemail facilities Often, such portable wireless communication devices mclude the ability to pre-store the telephone number utilized for access to the voicemail features - quite often including the requisite password data (e g, as an appendage to the access telephone number or as a second pseudo-telephone number to be dialed in succession after a connection has been established to the voicemail facility via the first telephone number) Of course, voicemail facilities can also be manually accessed by user manipulation of the usual keyboard - including entry of the requisite password for access to voicemail data
It is typical and conventional for audible feedback to be provided to the user of such communication devices Typically, a distinctly discernible tone is generated and made audible to the user for each digit of the access telephone number and

password Quite often, the audible feedback may be the usual DTMF tones that were traditionally used for transmitting key stroke data from a user to a telephone switch facility in a traditional POTS If alternate feedback audible tones are utilized, they have also conventionally been uniquely associated with particular digit values That is, there has traditionally been a one-to-one unique correspondence between a given tone frequency (or combination of frequencies in the case of DTMF tones) and a particular digit value being keyed manually or automatically transmitted
If a portable (1 e , wireless) communication device includes an automated voicemail access feature (including the required password), then an unauthonzed user (e g, a pickpocket or attacker) may obtain possession of the device and make unauthorized phone calls - including unauthonzed access to voicemail services In doing so, if there is some humanly detectable feedback that identifies the values of the password data being transmitted, then the unauthonzed user may learn the value of the secret password dunng a penod of unauthonzed possession If so, such information may even be obtained without the legitimate user knowing that such unauthonzed access has taken place and thus present a secunty nsk for future password protected voicemail services For example, the unauthonzed user might use an audio recorder to simply record the sequence of tones and then, knowing the unique correspondence between tone frequency and digit values, play back the recorded tones to ascertain the voicemail password value
Published US patent application US 2002/0076039 Al is directed towards jamming DTMF password tones reflected from a remote answenng machine by inserting suitable jamming signals at the remote answenng machine site This technique is used to foil eavesdroppers on the telephone line or cellular network

that may be listening to reflected return signals from the remote answering machine However, this approach does not at all address the problem of providing local protection to the password data caused by local user-feedback generated locally at the device where the password is entered
For at least such reasons, enhanced secunty for voicemail passwords is desirable
Bnef summary of the invention
We have now recognized that such voicemail password secunty problems can be substantially avoided by sending the voicemail password data without providing humanly detectable feedback that identifies the value(s) of the password data In the exemplary embodiment, this enhanced secunty can be achieved in at least one of the following ways
(a) do not provide any humanly detectable feedback while entenng the password,
(b) provide humanly detectable feedback via an audible sound mat does not uniquely correspond to the sent values of the password data (e g, the same tone frequency could be used for each digit of the number entered),
(c) a randomly selected tone frequency (or frequencies) may be used for audible feedback, and
(d) a fixed, predetermined, sequence of tone frequencies may be employed for audible feedback regardless of what the password value might be (e g , each separate device might even have different pre-programmed tone sequences to be played)
While one or more of these or different masking schemes might be utilized for the entire telephone number and password entry (whether or manual or pre-stored and

automatic), we are primarily concerned with using such masking schemes for at least the voicemail password
Masked visual feedback may be provided - either alone or m combination with masked audible feedback For example, as each password digit is being sent, a masking visual character not uniquely corresponding to the actual digit value (e g, an asterisk) might be displayed to represent sending of a password digit Various different visual feedback masking schemes may also be defined analogously to the audible masking schemes noted above
An option for centralized control of plural communication devices with respect to implementation of one of plural possible data value masking schemes may also be provided Of course, the device may be configured to have only one such masking scheme and avoid any choice at all Alternatively, the user may be permitted to choose if more than one such masking scheme is implemented and made available
This invention may be embodied in hardware, software or a combination of hardware and software The exemplary embodiment is realized entirely by executable computer program code which may be embodied in physical program memory media of conventional wireless communication devices
Bnef description of the drawings
These and other objects and advantages of this invention will be better understood
and appreciated in conjunction with the following detailed description of
exemplary embodiments taken together with the accompanying drawings, of
which

FIG 1 is an overall system wide schematic view of an exemplary wireless email
communication system incorporating a mobile wireless communication device
with enhanced security for voicemail passwords in accordance with one exemplary
embodiment of this invention,
FIG 2 is an abbreviated schematic diagram of hardware included within an
exemplary mobile wireless communication device,
FIG 3 is an exemplary abbreviated schematic flow diagram of a device control
program logic that may be utilized with the mobile communication device of FIG
2,
FIG 4 is an exemplary abbreviated schematic flow chart of computer software
(l e, program logic) that may be utilized in the device of FIG 2 to provide
enhanced security for at least voicemail passwords,
FIG 5 is an exemplary abbreviated schematic flow chart of computer software
(I e, program logic) that may be utilized in the device of FIG 2 to provide an
option for centralized control over the voicemail password masking scheme to be
implemented in a plurality of communication devices,
FIG 6 is an exemplary representation of a possible screen for a locked
communication device having content protection features enabled,
FIG 7 is an exemplary representation of a screen display for a locked
communication device nevertheless permitting telephone calls to be made, and
FIG 8 is an exemplary representation of a possible screen display for a locked
communication device which nevertheless provides for a menu permitting calls to
voicemail to be made
Detailed description of the EXEMPLARY EMBODIMENTS
FIG 1 is an overview of an exemplary communication system in which a wireless
communication device 100 may be used in accordance with this invention One

skilled in the art will appreciate that there may be hundreds of different system topologies There may also be many message senders and recipients The simple exemplary system shown in FIG 1 is for illustrative purposes only, and shows perhaps the currently most prevalent Internet email environment
FIG 1 shows an email sender 10, the Internet 12, a message server system 14, a wireless gateway 16, wireless infrastructure 18, a wireless network 20 and a mobile communication device 100
An email sender 10 may, for example, be connected to an ISP (Internet Service Provider) on which a user of the system has an account, located within a company, possibly connected to a local area network (LAN), and connected to the Internet 12, or connected to the Internet 12 through a large ASP (Application Service Provider) such as Amenca Onhne ™ (AOL) Those skilled in the art will appreciate that the systems shown in FIG 1 may instead be connected to a wide area network (WAN) other than the Internet, although email transfers are commonly accomplished through Internet-connected arrangements as shown in FIG 1
The message server 14 may be implemented, for example, on a network computer within the firewall of a corporation, a computer within an ISP or ASP system or the like, and acts as the main interface for email exchange over the Internet 12 Although other messaging systems might not require a message server system 14, a mobile device 100 configured for receiving and possibly sending email will normally be associated with an account on a message server Perhaps the two most common message servers are Microsoft Exchange™ and Lotus Domino™ These products are often used in conjunction with Internet mail routers that route

and dehver mail These intermediate components are not shown in FIG 1, as they do not directly play a role in the invention descnbed below Message servers such as server 14 typically extend beyond just email sending and receiving, They also include dynamic database storage engines that have predefined database formats for data like calendars, to-do lists, task lists, email and documentation
The wireless gateway 16 and infrastructure 18 provide a link between the Internet 12 and wireless network 20 The wireless infrastructure 18 determines the most likely network for locating a given user and tracks the users as they roam between countries or networks A message is then delivered to the mobile device 100 via wireless transmission, typically at a radio frequency (RF), from a base station in the wireless network 20 to the mobile device 100 The particular network 20 may be virtually any wireless network over which messages may be exchanged with a mobile communication device
As shown in FIG 1, a composed email message 22 is sent by the email sender 10, located somewhere on the Internet 12 This message 22 typically uses traditional Simple Mail Transfer Protocol (SMTP), RFC 822 headers and Multipurpose Internet Mail Extension (MIME) body parts to define the format of the mail message These techniques are all well known to those skilled in the art The message 22 arrives at the message server 14 and is normally stored in a message store Most known messaging systems support a so-called "pull" message access scheme, wherein the mobile device 100 must request that stored messages be forwarded by the message server to the mobile device 100 Some systems provide for automatic routing of such messages which are addressed using a specific email address associated with the mobile device 100 In a preferred embodiment, messages addressed to a message server account associated with a host system

such as a home computer or office computer which belongs to the user of a mobile device 100 are redirected from the message server 14 to the mobile device 100 as they are received
Regardless of the specific mechanism controlling forwarding of messages to mobile device 100, the message 22, or possibly a translated or reformatted version thereof, is sent to wireless gateway 16 The wireless infrastructure 18 includes a series of connections to wireless network 20 These connections could be Integrated Services Digital Network (ISDN), Frame Relay or Tl connections using the TCP/IP protocol used throughout the Internet As used herein, the term "wireless network" is intended to include three different types of networks, those being (1) data-centric wireless networks, (2) voice-centric wireless networks and (3) dual-mode networks that can support both voice and data communications over the same physical base stations Combined dual-mode networks include, but are not limited to, (1) Code Division Multiple Access (CDMA) networks, (2) the Group Special Mobile or the Glbal System for Mobile Communications (GSM) and the General Packet Radio Service (GPRS) networks, and (3) future third-generation (3G) networks like Enhanced Data-rates for Global Evolution (EDGE) and Universal Mobile Telecommunications Systems (UMTS) Some older examples of data-centric network include the Mobitex™ Radio Network and the DataTAC™ Radio Network Examples of older voice-centnc data networks include Personal Communication Systems (PCS) networks like GSM, and TDMA systems
As depicted in FIG 2, mobile communication device 100 includes a suitable RF antenna 102 for wireless communication to/from wireless network 20 Conventional RF, demodulation/modulation and decoding/coding circuits 104 are

provided As those skilled in the art will appreciate, such circuits can involve possibly many digital signal processors (DSPs), microprocessors, filters, analog and digital circuits and the like However, since such circuitry is well known in the art, it is not further described
As will be appreciated, device 100 may be configured to operate in a public switched telephone system (PSTS) so as to permit voice telephone calls and/or to provide access to conventional voicemail services
The mobile communication device 100 will also typically include a main control CPU 106 which operates under control of a stored program in program memory 108 (and which has access to data memory 110) CPU 106 communicates with a conventional keyboard 112, display 114 (e g, an LCD) and audio transducer or speaker 116 A portion of data memory 110a is available for stonng one or more voicemail (VM) access number and a corresponding password (PW) Suitable computer program executable code is stored in portions of program memory 108 to constitute the enhanced security for at least the stored VM PW
The control CPU 106 will typically be subject to a main control program such as depicted in FIG 3 Here, upon power up or turn on at 300, if the locked mode is not detected at 302, then continued normal operation may be permitted at 304 However, if the device is in a locked mode, then a check for an unlock request is made at 306 If an unlock request has been detected, then control may be passed to a conventional unlock routine 308 However, if the device remains in locked mode and there is no unlock request, then a check is made at 310 to see if the device has a currently enabled mode that permits calls (e g, voicemail access) to be made even in the locked mode If so, then a further test is made at 312 for a

request to access voicemail If such a request is detected, then control is passed to the voicemail routine at 314 Otherwise, the loop through test elements 306,310 and 312 are continued awaiting an appropriate input
As those in the art will appreciate, although the exemplary embodiment has been depicted herein (above and below) as using loop logic, it may be preferable to use interrupt event-driven logic instead for some or all such logic in an implementation on a specific hardware and/or operating system platform
A possible voicemail access control logic is depicted in FIG 4 and is entered at 400 Loop counter n is initialized to a one value at 402 A test is then made at 404 to see if pre-stored autodial of voicemail access with the password has been enabled If not, then a wait loop is entered at 406 for an appropriate user keyed input of a digit of die voicemail access phone number and password As will be appreciated, the enhanced security features of FIG 4 logic may be bypassed, if desired, for the phone mail telephone access number and employed mstead only for the password transmission
When a next digit D(n) is available for sending (of the voicemail telephone access number and/or the secret password), then it is transmitted at 408 in the usual and conventional way over suitable digital channels using suitable digital signaling protocol Of course, this conventional actual signaling using digital protocols and the like for a telephone switch network does not by itself provide any audible (or visual) feedback to the user
Provisions for possible audible and/or visual user feedback are provided at 410 As those skilled in the art will appreciate, modern microprocessors and/or DSPs

have software control tone generators (or can be programmed with suitable operatmg system or application software to provide such features) As depicted at 410 in FIG 4, one option is simply to provide no audible user feedback at all of any kind However, this option is not preferred because it is expected that some audible user feedback will be given (e g, so that the user knows that a digit has actually been transmitted over the signaling circuits) A second option at 410 is to always generate the same fixed tone T for each sent digit A third possible masking scheme depicted at 410 is to randomly select a tone using a random number RN so as to select a possibly different tone T(RN) for each successive digit Anodier possible masking scheme is depicted at 410 which provides for a fixed sequential tones T(n) to be transmitted - regardless of what value might be transmitted for the successive digits Logic for analogous masked visual feedback schemes may also be provided As will be appreciated, all of these are mere examples of masking schemes that might be used so as to send a voicemail password without providing humanly detectable feedback that identifies the value or values of the password data
A suitable test is made at 412 to see if there are additional digits to be sent If so, then the loop counter n is incremented at 414 and control is passed back to the top of the loop at 404 If the complete set of digits has been transmitted, then that will be detected at 412 and the routine will be exited at 416
Of course, as those skilled in the art will appreciate, there are many conventional techniques for determining when the last digit of a sequence has been reached For example, instead of counting to an expected maximum number of digits (a number which may be set during configuration of this device for a particular telephone system interface), a wait loop may be entered to see if another digit is

entered (either automatically or manually) after some predetermined period of time If not, then it may be assumed that all of the desired numbers have been entered and the routine may be exited at 416 in this manner Those skilled in the art will recognize other techniques for achieving the desired end result as well
If desired, a masking scheme selection routine may be provided as depicted in FIG 5 and entered at 500 This exemplary embodiment enables a centralized control option which is tested for at 502 If present, then the masking scheme selection is only permitted to occur at 504 in response to incoming data from a central IT control department or the like so as to select (e g, one of the schemes a, b, c or d as depicted and described above)
If the centralized control option is not enabled, then individual user inputs are accepted at 506 so as to select between one of plural possible masking schemes Exit to other processing routines is made conventionally at 508 or 510 as may be appropriate
If the communication device 100 is locked (I e, content protection features are enabled), then the visual screen of the device may appear virtually blank to an unauthorized user For example, the screen might appear as depicted in FIG 6 However, if calls for voicemail are nevertheless permitted even in tins locked mode, then a user may be able to call up a menu as depicted in FIG 7 (e g , by user movement of a wheel or pressure on a key) and select an option to place a call If this option is chosen, then a screen such as depicted in FIG 8 may be provided to permit an automated voicemail access call As also shown in FIG 7, options may be provided to permit an emergency pre-programmed call or the

placement of other desired telephone calls (e g, for voicemail access - perhaps pre-programmed and automated or manually implemented)
If the device user has the option to enable a feature which allows him or her to make a phone call from the locked screen without logging into their device, this allows an attacker to pickpocket the user's device and make phone calls Users that enable this feature have to take this nsk However, without our invention, this also makes a user's pre-stored voicemail password easily accessible when the device has been stolen — even while it is locked For example, without our invention, an attacker just has to dial (i e, select) a pre-programmed voicemail number, and when the password (access number) is automatically entered by the system, record the tones If the tones are unique to each number (as they are conventionally) by playing back the recorded tones the attacker can ascertain the user's voicemail password
However, as descnbed above, our exemplary embodiment provides four solutions to this problem
a) don't play any tones while automatically entenng the password,
b) play a constant tone while automatically entenng the password (e g, the same tone would be played for each digit entered,
c) play a random tone while automatically entenng the password (e g , choose a new random tone for each number entered), and/or
d) play a fixed predetermined sequence of tones while automatically entenng the password (e g , always play the same sequence of tones regardless of what the password digit value sequence is) - each device may even have a different preprogrammed tone sequence that is played

When setting up voicemail dialing, a user may be required to enter two values One is a "voicemail number", and the other is "additional numbers" The phone application first dials the voicemail number, and then the additional numbers Typically, the additional numbers comprise a password, and so the phone application may automatically apply tone remapping (i e, a masking scheme) when it dials the additional numbers Of course, the additional number could also comprise a phone extension, etc
A central IT admmistrator may enforce which remapping scheme (1 e , a-d should be used by sending an IT policy to the device) However, it may not improve the security Conventionally an IT admmistrator may determine whether a user is or isn't allowed to dial then: voicemail from a locked screen
If a device is unlocked, then the additional numbers (i e, the password) may be visible and, if so, the attacker would have access to the password visibly and therefore remapping of the tones doesn't presently provide any security in the unlocked mode However, in an implementation where the password is masked out in the options screen, then enhanced security may be enjoyed even in the unlocked mode Typically, the digits of a sent telephone number have been mapped to a uniquely corresponding tone so that when dialing, the user hears certain tones In the exemplary embodiments of this invention, that mapping is changed at least when the password is being dialed The four different exemplary mapping techniques (i e, silent, constant, random, random sequence) all provide enhanced security However, the silent option may not be user-friendly as a legitimate user doesn't know whether the password was or was not dialed

While the invention has been descnbed in connection with what is presently considered to be the most practical and preferred embodiment, it is to be understood that the invention is not limited to the disclosed embodiments, but on the contrary, is intended to cover variations, modifications and equivalent arrangements included within the spirit and scope of the appended claims

We claim:
1. A method for enhancing the security of a voicemail system, the method
comprising:
receiving incoming data from a central control, at a device (100) used to access the voicemail system, where the central control (502, 504) is remote from the device (100);
selecting, based on the incoming data, a password feedback masking scheme for masking device-generated audible feedback, the password feedback masking scheme configured to prevent identification of password data entered at the device;
receiving, at the device, voicemail password data input;
sending, from the device, the voicemail password data; and
generating at the device, according to the password feedback masking scheme, audible feedback of the voicemail password data.
2. The method as claimed in claim 1 wherein the voicemail password data includes a
plurality of digits and the generating the audible feedback according to the
password feedback masking scheme comprises one of:
playing a common, predetermined audible feedback tone for each digit of the plurality of digits;
playing a random audible feedback tone for each digit of the plurality of digits; and
playing an audible feedback tone from a fixed sequence of tones for each digit of the plurality of digits.
3. The method as claimed in claim 1 comprising:
providing an option permitting automated voicemail access to take place even when the device is otherwise in a locked and secure status preventing a mere
possessor of the device from having access to at least some other functionality of the communication device.
4. The method as claimed in claim 1 comprising implementing the password feedback masking scheme as one of plural possible password feedback masking schemes.
5. The method as claimed in claim 1 comprising providing an option for the device to implement one of plural possible password data value masking schemes.
6. A communication device (100) providing enhanced security for a password-protected voicemail system accessed remotely by inputting a voicemail password locally at the communication device, the communication device comprising:
communication circuits (104, 102) adapted to permit access to a remote voicemail facility;
means (102) for receiving incoming data from a central control remote from the communication device;
means for selecting (106), based on the incoming data, a password feedback masking scheme for masking device-generated audible feedback, the password feedback masking scheme configured to prevent identification of password data entered at the communication device;
means (112) for receiving voicemail password data;
means (106, 108, 110) for sending the voicemail password data to a remote voicemail system; and
means (106, 116), responsive to receiving the voicemail password data, for generating, according to the password feedback masking scheme, audible feedback of the voicemail password data.
7. The device as claimed in claim 6 comprising:
means for implementing the password feedback masking scheme selected as one of plural possible password feedback masking schemes.
8. The device as claimed in claim 7 wherein the voicemail password data includes a
plurality of digits and the generating the audible feedback according to the
password feedback masking scheme comprises one of:
playing a common, predetermined audible feedback tone for each digit of the plurality of digits;
playing a random audible feedback tone for each digit of the plurality of digits; and
playing an audible feedback tone from a fixed sequence of tones for each digit of the plurality of digits.
9. The device as claimed in claim 6 comprising:
means for providing an option permitting automated voicemail access to take place even when the device is otherwise in a locked and secure status preventing a mere possessor of the device from having access to at least some other functionality of the communication device.

Documents:

« Previous Patent

Next Patent »

Patent Number

258822

Indian Patent Application Number

1268/DEL/2005

PG Journal Number

07/2014

Publication Date

14-Feb-2014

Grant Date

10-Feb-2014

Date of Filing

17-May-2005

Name of Patentee

RESEARCH IN MOTION LIMITED

Applicant Address

295 PHILLIP STREET, WATERLOO, ONTARIO N2L 3W8, CANADA.

Inventors:

#	Inventor's Name	Inventor's Address
1	ADAMS NEIL P.	550 LITTLE DOVER CRES. WATERLOO, ONTARIO, CANADA N2K 4E4.
2	LITTLE HERBERTA.	504 OLD OAK PLACE, WATERLOO, ONTARIO, CANADA N2T 2V8.
3	KIRKUP MICHAEL G.	413 EXMOOR STREET, WATERLOO, ONTARIO, CANADA N2K 3X5.
4	VANDER VEEN RAYMOND P.	800 COLUMBIA FOREST COURT, WATERLOO, ONTARIO, CANADA N2V 2M6.

PCT International Classification Number

H04L 9/00

PCT International Application Number

N/A

PCT International Filing date

PCT Conventions:

#	PCT Application Number	Date of Convention	Priority Country
1	04253251.5	2004-06-01	EUROPEAN UNION