Methods and systems for server-initiated activation of device for operation with server

• US 10,075,438 B2
• Filed: 06/06/2016
• Issued: 09/11/2018
• Est. Priority Date: 04/12/2013
• Status: Active Grant

• Current Assignee: Malikie Innovations Limited (Key Patent Innovations Limited)
• Original Assignee: Blackberry Limited
• Inventors: Truskovsky, Alexander, Martin, Daryl Joseph
• Primary Examiner(s): Desrosiers, Evans
• Application Number:
  US15/174,226
• Publication Number:
  US 20160285869A1
• Time in Patent Office: 827 Days
• Field of Search: 713168-174, 713182-186, 713202, 709206, 709225, 709229, 709249, 709389, 726 2- 8
• CPC Class Codes: H04L 47/70 Admission control; Resource allocation
• CPC Class Codes: H04L 63/0823 using certificates cryptographic mechanisms or cryptographic arrangements for entity authentication involving certificates H04L9/3263
• CPC Class Codes: H04L 63/0869 for achieving mutual authentication cryptographic mechanisms or cryptographic arrangements for mutual authentication H04L9/3273
• CPC Class Codes: H04L 63/10 for controlling access to devices or network resources
• CPC Class Codes: H04L 63/1458 Denial of Service
• CPC Class Codes: H04L 67/04 specially adapted for terminals or networks with limited capabilities; specially adapted for terminal portability
• CPC Class Codes: H04W 12/069 using certificates or pre-shared keys
• CPC Class Codes: H04W 88/02 Terminal devices

Abstract

Methods and systems for enabling activation of a wireless communication device to operate with a server on a wireless communication network. An activation request to establish a wireless communication service relationship between the device and the server is pushed from the server to the device. After the device verifies the server, a mutually authenticated communication session is established between the device and the server for activation of the device on the server.

Claims

1. A method for a wireless communication device, comprising:

receiving, by the wireless communication device from a server for providing wireless services for wireless communication devices, an activation request to establish a wireless communication service relationship between the wireless communication device and the server, wherein the activation request is pushed from the server to the wireless communication device in absence of any prior communication being sent from the wireless communication device to the server;

attempting, by the wireless communication device, to verify identity information of the server;

after the identity information of the server is verified by the wireless communication device and input to accept the activation request is received by the device, establishing a mutually authenticated communication session between the wireless communication device and the server; and

establishing, using the mutually authenticated communication, the wireless communication service relationship between the wireless communication device and the server.

2. The method of claim 1, wherein the activation request is authenticated with a signature signed with a server certificate, wherein the server certificate includes server identity information, wherein the wireless communication device attempts to verify one or both of the signature or the server identity information.

3. The method of claim 2, wherein the mutually authenticated communication session is authenticated by the wireless communication device using the server certificate and a device certificate on the wireless communication device.

4. The method of claim 3, wherein the server certificate also includes server authentication information, and wherein the device certificate includes device identity information and device authentication information.

5. The method of claim 4, wherein the server is a mobile device management server distinct from a certificate authority which issued the server certificate and device certificate.

6. The method of claim 1, further comprising:

after the server is verified by the wireless communication device and before input to accept the activation request, receiving pre-setting instructions from the server, and pre-setting the wireless communication device with pre-settings in accordance with the pre-setting instructions from the server, wherein the pre-settings made on the wireless communication device are initially inactive;

activating the pre-settings after the input to accept the activation request is received by the wireless communication device.

7. The method of claim 6, further comprising:

removing the pre-settings after the input to reject the activation request is received by the wireless communication device.

8. The method of claim 6, wherein pre-settings comprises one or more of pre-setting a security perimeter governing usage of one or more resources on the wireless communication device, pre-installing an application on the wireless communication device or pre-setting personal information management (PIM) on the wireless communication device.

16. The method of claim 1, further comprising:

before notification that the activation request has been accepted is received, pushing pre-setting instructions to the wireless communication device, wherein the pre-setting instructions cause pre-setting the wireless communication device with pre-settings in accordance with the pre-setting instructions from the server, wherein the pre-settings made on the wireless communication device are initially inactive until the activation request is accepted.

17. The method of claim 16, wherein the pre-setting instructions cause removal of the pre-settings after the input to reject the activation request is received by the wireless communication device.

18. The method of claim 16, wherein pre-settings comprises one or more of pre-setting a security perimeter governing usage of one or more resources on the wireless communication device, pre-installing an application on the wireless communication device or pre-setting personal information management (PIM) on the wireless communication device.

9. A wireless communication device, comprising:

a processor;

a memory coupled to the processor, the memory storing executable instructions that, when executed by the processor, cause the wireless communication device to;

receive, from a server for providing wireless services for wireless communication devices, an activation request to establish a wireless communication service relationship between the wireless communication device and the server, wherein the activation request is pushed from the server to the wireless communication device in absence of any prior communication being sent from the wireless communication device to the server;

attempt to verify identity information of the server;

after the identity information of the server is verified by the wireless communication device and input to accept the activation request is received, establish a mutually authenticated communication session between the wireless communication device and the server; and

establish, using the mutually authenticated communication, the wireless communication service relationship between the wireless communication device and the server.

10. A non-transitory machine readable medium having tangibly stored thereon executable instructions for execution by a processor of a wireless communication device that, when executed by the processor, cause the wireless communication device to:

receive, from a server for providing wireless services for wireless communication devices, an activation request to establish a wireless communication service relationship between the wireless communication device and the server, wherein the activation request is pushed from the server to the wireless communication device in absence of any prior communication being sent from the wireless communication device to the server;

attempt to verify identity information of the server;

after the identity information of the server is verified by the wireless communication device and input to accept the activation request is received, establish a mutually authenticated communication session between the wireless communication device and the server; and

establish, using the mutually authenticated communication, the wireless communication service relationship between the wireless communication device and the server.

11. A method for a server for providing wireless services for wireless communication devices, comprising:

pushing to a wireless communication device an activation request to establish a wireless communication service relationship between the wireless communication device and the server, wherein the activation request is pushed from the server to the wireless communication device in absence of any prior communication being sent from the wireless communication device to the server;

after notification that the activation request has been accepted establishing a mutually authenticated communication session between the wireless communication device and the server; and

establishing, using the mutually authenticated communication, the wireless communication service relationship between the wireless communication device and the server.

12. The method of claim 11, wherein the activation request is authenticated with a signature signed with a server certificate, wherein the server certificate includes server identity information, wherein the wireless communication device attempts to verify one or both of the signature or the server identity information.

13. The method of claim 12, wherein the mutually authenticated communication session is authenticated by the wireless communication device using the server certificate and a device certificate on the wireless communication device.

14. The method of claim 12, wherein the server certificate also includes server authentication information, and wherein the device certificate includes device identity information and device authentication information.

15. The method of claim 14, wherein the server is a mobile device management server distinct from a certificate authority which issued the server certificate and device certificate.

19. A server for providing wireless services for wireless communication devices, comprising:

a processor;

a memory coupled to the processor, the memory storing executable instructions that, when executed by the processor, cause the server to;

push to a wireless communication device an activation request to establish a wireless communication service relationship between the wireless communication device and the server, wherein the activation request is pushed from the server to the wireless communication device in absence of any prior communication being sent from the wireless communication device to the server;

after notification that the activation request has been accepted, establish a mutually authenticated communication session between the wireless communication device and the server; and

establish, using the mutually authenticated communication, the wireless communication service relationship between the wireless communication device and the server.

20. A non-transitory machine readable medium having tangibly stored thereon executable instructions for execution by a processor of a server for providing wireless services for wireless communication devices that, when executed by the processor, cause the server to:

push to a wireless communication device an activation request to establish a wireless communication service relationship between the wireless communication device and the server, wherein the activation request is pushed from the server to the wireless communication device in absence of any prior communication being sent from the wireless communication device to the server;

after notification that the activation request has been accepted, establish a mutually authenticated communication session between the wireless communication device and the server; and

establish, using the mutually authenticated communication, the wireless communication service relationship between the wireless communication device and the server.