Mobile communication device

Abstract

A method of accessing a partition on a mobile communication device comprises receiving data specifying a partition; receiving an identification code from an identification module in or associated with the device; determining, based on both the data specifying a partition and the identification code, whether access to the specified partition is to be allowed; and allowing or denying access to the specified partition accordingly.

1 . A method of accessing a partition or switching between partitions on a mobile communication device, the method comprising:
 receiving data specifying a partition;   receiving an identification code from a identification module associated with the device;   determining, based on both the data specifying a partition and the identification code, whether access to the specified partition is to be allowed; and   allowing or denying access to the specified partition accordingly.   
     
     
         2 . A method as claimed in  claim 1 , wherein the identification module is or comprises a removable identification module, a remote identification module, a SIM card, hardware, a secure element, a trusted execution environment, or a software SIM. 
     
     
         3 . A method as claimed in  claim 1  or  2 , wherein the data specifying a partition and identification code are verified in the identification module to determine whether access to the specified partition is to be allowed. 
     
     
         4 . A method as claimed in  claim 1 ,  2  or  3 , further comprising generating the identification code in the identification module based on the data specifying a partition. 
     
     
         5 . A method as claimed in any preceding claim, wherein the identification code is a certificate generated from identification data of the identification module. 
     
     
         6 . A method as claimed in any preceding claim, wherein the identification code is received from and corresponds to a SIM card in the device. 
     
     
         7 . A method as claimed in any preceding claim, wherein the data specifying a partition comprises a passcode for the specified partition. 
     
     
         8 . A method as claimed in  claim 7 , wherein the device comprises keys and/or a touch-sensitive screen, and the passcode is received when a user presses the keys and/or the touch-sensitive screen so as to enter the passcode. 
     
     
         9 . A method as claimed in  claim 7  or  8 , wherein the identification code is generated by passing the passcode through an algorithm to create a hash. 
     
     
         10 . A method as claimed in  claim 9 , wherein the algorithm comprises an encryption algorithm, preferably a PKI encryption algorithm. 
     
     
         11 . A method as claimed in  claim 9  or  10 , wherein the hash is compared with a predefined hash for the partition and access to the partition is allowed only if the two hashes match. 
     
     
         12 . A method as claimed in any preceding claim, wherein the data specifying a partition is received from a signal-emitting device. 
     
     
         13 . A method as claimed in  claim 12 , wherein the signal-emitting device comprises a NFC tag. 
     
     
         14 . A method as claimed in any preceding claim comprising decrypting any encrypted content stored in the accessed partition. 
     
     
         15 . A method as claimed in any preceding claim, further comprising sending the identification code from the identification module to open the specified partition when access to the specified partition is allowed. 
     
     
         16 . A method as claimed in any preceding claim, further comprising sending or displaying a message indicating that access to the specified partition is not allowed when access to the specified partition is not allowed. 
     
     
         17 . A method as claimed in any preceding claim, further comprising sending the data specifying a partition and the identification code from the identification module to a partition entry module when access to the specified partition is allowed. 
     
     
         18 . A method as claimed in  claim 17 , wherein the data specifying a partition and the identification code are sent from the identification module to a partition entry module via a secure channel therebetween. 
     
     
         19 . A method as claimed in  claim 18 , wherein the secure channel is created by a mutual authentication process between the identification module and the partition entry module. 
     
     
         20 . A method as claimed in  claim 17 ,  18  or  19 , further comprising encrypting the data specifying a partition and/or the identification code before sending them to the partition entry module. 
     
     
         21 . A method as claimed in any preceding claim, further comprising switching partition automatically at a predefined time. 
     
     
         22 . A method as claimed in any preceding claim, wherein different telephone numbers are associated with different partitions on a single mobile communication device. 
     
     
         23 . A mobile communication device comprising a partition entry module, wherein the partition entry module is arranged to:
 receive data specifying a partition;   receive an identification code from an identification module associated with the device;   determine, based on both the data specifying a partition and the identification code, whether access to the specified partition is to be allowed; and   allow or deny access to the specified partition accordingly.   
     
     
         24 . A device as claimed in  claim 23 , wherein the identification module is or comprises a removable identification module, a remote identification module, a SIM card, hardware, a secure element, a trusted execution environment, or a software SIM. 
     
     
         25 . A device as claimed in  claim 23  or  24 , wherein the identification module is arranged to verify the data specifying a partition and the identification code to determine whether access to the specified partition is to be allowed. 
     
     
         26 . A device as claimed in any of  claims 23 - 25 , wherein the identification module is arranged to generate the identification code based on the data specifying a partition. 
     
     
         27 . A device as claimed in any of  claims 23 - 26 , wherein the identification code is a certificate generated from identification data of the identification module. 
     
     
         28 . A device as claimed in any of  claims 23 - 27 , wherein the identification code is received from and corresponds to the SIM card in the device. 
     
     
         29 . A device as claimed in any of  claims 23 - 28 , wherein the data specifying a partition comprises a passcode for the specified partition. 
     
     
         30 . A device as claimed in  claim 29 , wherein the device comprises keys and/or a touch-sensitive screen, and the partition entry module and/or identification module is arranged to receive the passcode when a user presses the keys and/or the touch-sensitive screen so as to enter the passcode. 
     
     
         31 . A device as claimed in  claim 29  or  30 , wherein the partition entry module and/or identification module comprises a hash creation module, the hash creation module being arranged to pass the identification code and the passcode through an algorithm to create a hash. 
     
     
         32 . A device as claimed in  claim 31 , wherein the algorithm comprises an encryption algorithm, preferably a PKI encryption algorithm. 
     
     
         33 . A device as claimed in  claim 31  or  32 , wherein the partition entry module comprises a verification module arranged to compare the hash with a predefined hash for the partition, and to allow access to the partition if the two hashes match. 
     
     
         34 . A device as claimed in any of  claims 23  to  33 , wherein the device comprises a receiver arranged to receive data specifying a partition from a signal-emitting device. 
     
     
         35 . A device as claimed in  claim 34 , wherein the signal-emitting device comprises a NFC tag. 
     
     
         36 . A device as claimed in any of  claims 23  to  35 , wherein the device comprises decryption means for decrypting any encrypted content of an accessed partition. 
     
     
         37 . A device as claimed in any of  claims 23 - 36 , wherein the identification module is arranged to sending the identification code to open the specified partition when access to the specified partition is allowed. 
     
     
         38 . A device as claimed in any of  claims 23 - 37 , wherein the device is arranged to send or display a message indicating that access to the specified partition is not allowed when access to the specified partition is not allowed. 
     
     
         39 . A device as claimed in any of  claims 23 - 38 , wherein the identification module is arranged to send the data specifying a partition and the identification code to a partition entry module when access to the specified partition is allowed. 
     
     
         40 . A device as claimed in  claim 39 , wherein the identification module is arranged to send the data specifying a partition and the identification code to a partition entry module via a secure channel. 
     
     
         41 . A device as claimed in  claim 40 , wherein the secure channel is created by a mutual authentication process between the identification module and the partition entry module. 
     
     
         42 . A device as claimed in  claim 39 ,  40  or  41 , further comprising means for encrypting the data specifying a partition and/or the identification code before sending them to the partition entry module. 
     
     
         43 . A method of creating a partition on a mobile communication device, the method comprising:
 inputting a passcode for the partition; and   setting what content and/or functionality is available in the partition.   
     
     
         44 . A method as claimed in  claim 43 , further comprising inputting a name or identifier for the partition. 
     
     
         45 . A method as claimed in  claim 43  or  44 , comprising passing the passcode through an algorithm to create a hash. 
     
     
         46 . A method as claimed in  claim 45 , comprising passing an identification code or identification data from an identification module, such as a SIM card or hardware or secure element or software SIM or trusted execution environment, in or associated with the device through the algorithm with the passcode to create the hash. 
     
     
         47 . A method as claimed in  claim 45  or  46 , wherein the algorithm comprises an encryption algorithm, preferably a PKI encryption algorithm. 
     
     
         48 . A method as claimed in  claim 45 ,  46  or  47 , comprising storing the hash in the device. 
     
     
         49 . A method as claimed in any of  claims 45  to  48 , comprising storing the hash remotely, preferably in a cloud or an external memory device. 
     
     
         50 . A method as claimed in any of  claims 43  to  49 , comprising encrypting the content that is available in the partition. 
     
     
         51 . A method as claimed in  claim 50 , comprising using a passcode and/or an identification code or identification data from an identification module, such as a SIM card or hardware or secure element or software SIM or trusted execution environment, in or associated with the device to encrypt the content. 
     
     
         52 . A method as claimed in  claim 50  or  51 , comprising decrypting the content when the partition is accessed. 
     
     
         53 . A method as claimed in any of  claims 43  to  52 , further comprising storing the passcode for the partition in an identification module of the device. 
     
     
         54 . A method as claimed in any of  claims 43  to  53 , further comprising receiving identification data from an identification module of the device and generating an identification code for the partition based on the passcode and the identification data. 
     
     
         55 . A method as claimed in  claim 54 , further comprising storing the identification code in the device, preferably in a mapping table for the partitions in the device. 
     
     
         56 . A method as claimed in any of  claims 43 - 55 , further comprising storing one or more times at which the device will automatically switch between partitions. 
     
     
         57 . A method as claimed in any of  claims 43 - 56 , further comprising associating different telephone numbers with two or more partitions on a single mobile communication device. 
     
     
         58 . A mobile communication device comprising a partition creation module, the partition creation module being arranged to:
 receive a passcode for a partition to be created;   create a partition on the device corresponding to that passcode; and   set what content and/or functionality is available in that partition.   
     
     
         59 . A device as claimed in  claim 58 , wherein the partition creation module is further arranged to receive a name or identifier for the partition. 
     
     
         60 . A device as claimed in  claim 58  or  59 , wherein the partition creation module is arranged to pass the passcode through an algorithm to create a hash. 
     
     
         61 . A device as claimed in  claim 60 , wherein the partition creation module is arranged to pass an identification code or identification data from an identification module, such as a SIM card or hardware or secure element or software SIM or trusted execution environment, in or associated with the device through the algorithm with the passcode to create the hash. 
     
     
         62 . A device as claimed in  claim 60  or  61 , wherein the algorithm comprises an encryption algorithm, preferably a PKI encryption algorithm. 
     
     
         63 . A device as claimed in  claim 60 ,  61  or  62 , wherein the partition creation module is arranged to store the hash in the device. 
     
     
         64 . A device as claimed in any of  claims 60  to  63 , wherein the partition creation module is arranged to store the hash remotely, preferably in a cloud or an external memory device. 
     
     
         65 . A device as claimed in any of  claims 58  to  64 , wherein the device comprises an administrator partition and the partition creation module is only accessible when in the administrator partition. 
     
     
         66 . A device as claimed in any of  claims 58  to  65 , wherein the content that is accessible in the partition is encrypted. 
     
     
         67 . A device as claimed in  claim 66 , wherein the device comprises decryption means arranged to decrypt the encrypted content of a partition when a user accesses that partition. 
     
     
         68 . A device as claimed in any of  claims 58  to  68 , wherein the passcode for the partition is stored in a SIM card or hardware or secure element of the device. 
     
     
         69 . A device as claimed in any of  claims 58  to  68 , wherein the partition creation module is in the identification module of the device. 
     
     
         70 . A system comprising a mobile communication device and at least one signal-emitting device, wherein the devices are arranged such that when the mobile communication device receives a signal from a signal-emitting device specifying a partition, the mobile communication device accesses the partition specified by that signal. 
     
     
         71 . A system as claimed in  claim 70 , wherein the at least one signal-emitting device comprises a NFC tag. 
     
     
         72 . A system as claimed in  claim 70  or  71 , wherein the signal specifying a partition comprises a passcode for that partition. 
     
     
         73 . A system as claimed in  claim 70 ,  71  or  72 , wherein the signal specifying a partition comprises information specifying what functionality the mobile communication device will have in that partition and/or what content will be available. 
     
     
         74 . A signal-emitting device arranged to send a signal specifying a partition to a mobile communication device such that when the mobile communication device receives the signal the mobile communication device accesses the partition specified by that signal. 
     
     
         75 . A method of accessing a partition on a mobile communication device, the method comprising:
 receiving a signal from a signal-emitting device, the signal comprising information specifying a partition on a mobile communication device; and   accessing that partition based on the received signal.   
     
     
         76 . A method as claimed in  claim 75 , wherein the signal specifying a partition comprises a passcode for the partition. 
     
     
         77 . A method as claimed in  claim 76  comprising accessing a partition on the device corresponding to the received passcode. 
     
     
         78 . A method as claimed in  claim 75 ,  76  or  77 , wherein the signal specifying a partition comprises information specifying what functionality the mobile communication device will have and/or what content will be available when that partition is accessed. 
     
     
         79 . A method as claimed in any of  claims 75  to  78 , wherein the signal-emitting device comprises an NFC tag. 
     
     
         80 . A mobile communication device comprising:
 a receiver for receiving a signal comprising information specifying a partition on a mobile communication device; and   partition access means for accessing a partition based on the received signal.   
     
     
         81 . A device as claimed in  claim 80 , wherein the receiver is arranged to receive a passcode for a partition and the partition access means is arranged to access the partition that corresponds to the received passcode. 
     
     
         82 . A device as claimed in  claim 80  or  81 , wherein the partition access means is arranged to create a partition based on partition configuration information contained in the received signal, and to then access that partition. 
     
     
         83 . A device as claimed in  claim 80 ,  81  or  82 , wherein the receiver is arranged to receive a signal from a NFC tag. 
     
     
         84 . A method of accessing a partition on a mobile communication device comprising selecting a partition from a list of available partitions displayed on the device and then accessing the selected partition. 
     
     
         85 . A method as claimed in  claim 84 , the partitions having predefined accessible content and/or functionality. 
     
     
         86 . A method as claimed in  claim 84  or  85 , wherein the list of available partitions comprises a list of partition names. 
     
     
         87 . A method as claimed in  claim 84 ,  85  or  86 , wherein the list of available partitions comprises a list or array of images representing the respective partitions. 
     
     
         88 . A method as claimed in any of  claims 84  to  87 , comprising a user touching keys and/or a touch screen of the device in order to select a partition. 
     
     
         89 . A method as claimed in any of  claims 84  to  88 , wherein after a partition has been selected, a user must enter a passcode for that partition before the partition can be accessed. 
     
     
         90 . A mobile communication device comprising at least two partitions and a partition access module, wherein the partition access module is arranged to:
 cause a screen on the mobile communication device to display a list of available partitions;   receive data specifying a partition selected from that list; and   allow access to the selected partition.   
     
     
         91 . A mobile communication device as claimed in  claim 90 , wherein the partition access module is arranged to only allow access to a selected partition if it receives a correct passcode for that partition. 
     
     
         92 . A computer program for accessing a partition on a mobile communication device, the program being configured to perform the following steps when executed on a mobile communication device:
 receive data specifying a partition;   receive an identification code from an identification module, such as a SIM card or hardware or secure element or software SIM or trusted execution environment, in or associated with the device;   verify, based on both the data specifying a partition and the identification code, whether access to the specified partition is to be allowed; and   allow or deny access to the specified partition accordingly.   
     
     
         93 . A computer program for creating a partition on a mobile communication device, the program being configured to perform the following steps when executed on a mobile communication device:
 receive a passcode for the partition; and   set what content and/or functionality is available in the partition.   
     
     
         94 . A computer program for accessing a partition on a mobile communication device, the program being configured to perform the following steps when executed on a mobile communication device:
 receive a signal from a signal-emitting device, the signal comprising information specifying a partition on a mobile communication device; and   allow access to that partition based on the received signal.   
     
     
         95 . A computer program for accessing a partition on a mobile communication device, the program being configured to perform the following steps when executed on a mobile communication device:
 display a list of available partitions on a screen of the mobile communication device;   receive information corresponding to a partition selected from that list; and   allow access to the selected partition.   
     
     
         96 . A computer readable medium with a computer program as defined in any of  claims 92 - 95  stored thereon.