Methods and apparatus for use in enabling a mobile communication device with a digital certificate

• US 10,356,083 B2
• Filed: 06/06/2018
• Issued: 07/16/2019
• Est. Priority Date: 02/29/2008
• Status: Active Grant

• Current Assignee: Malikie Innovations Limited (Key Patent Innovations Limited)
• Original Assignee: Blackberry Limited
• Inventors: Bender, Christopher Lyle, Shih, Sam Cheng-Fu, Adams, Neil Patrick
• Primary Examiner(s): Tabor, Amare F
• Application Number:
  US16/000,978
• Publication Number:
  US 20180288036A1
• Time in Patent Office: 405 Days
• Field of Search: 726 1, 726 10, 713155-158, 713175-176, 380255, 380270
• CPC Class Codes: G06F 21/33 using certificates
• CPC Class Codes: H04L 63/0823 using certificates cryptographic mechanisms or cryptographic arrangements for entity authentication involving certificates H04L9/3263

Abstract

A mobile communication device causes a communication session to be established with a host server of a communication network. The mobile device performs communication operations in the communication session for activating a communication service, such as a data synchronization service, with the host server. In the communication session, the mobile device also receives configuration information which includes information for use in constructing a request message for obtaining a digital certificate from a certificate authority (CA). After receipt of the configuration information, the mobile device constructs the request message for the digital certificate and causes it to be sent to the host server. In response, the host server requests and obtains the digital certificate from the CA on behalf of the mobile device, and thereafter “pushes” the received digital certificate to the mobile device. The mobile device receives the digital certificate and stores it for use in subsequent communications.

Claims

1. A non-transitory computer-readable medium storing computer-executable instructions which, when executed by a processor of a mobile communication device, cause the mobile communication device:

responsive to the mobile communication device receiving configuration information from a host server over a secure connection,

to generate a public-private key pair of a type indicated in the configuration information;

to construct a certificate request that contains the generated public key and sign the certificate request with the generated private key; and

to send the certificate request to a certificate authority indicated in the configuration information;

responsive to the mobile communication device sending the certificate request to the certificate authority, to receive a digital certificate signed by the certificate authority indicated in the configuration information, the digital certificate containing the generated public key; and

responsive to the mobile communication device receiving the digital certificate, to present the digital certificate to an authentication server in a certificate-based authentication process to obtain communication access in a network.

2. The non-transitory computer-readable medium as recited in claim 1, wherein execution of the instructions further causes the mobile communication device, responsive to receiving the digital certificate, to store the digital certificate in a certificate keystore at the mobile communication device.

3. The non-transitory computer-readable medium as recited in claim 1, wherein the certificate-based authentication process is an extensible authentication protocol (EAP) process.

4. The non-transitory computer-readable medium as recited in claim 1, wherein the network is a wireless local area network (WLAN).

5. The non-transitory computer-readable medium as recited in claim 1, wherein the secure connection is established over a radio link between the mobile communication device and a cellular telecommunications network.

6. The non-transitory computer-readable medium as recited in claim 1, wherein the secure connection is established over a wired connection between the mobile communication device and a computer connected in a local area network to the host server.

7. The non-transitory computer-readable medium as recited in claim 1, wherein execution of the instructions further causes the mobile communication device to

cause a communication session to be established with the host server;

and

perform communication operations in the communication session with the host server for activating a communication service provided by the host server to the mobile communication device.

8. The non-transitory computer-readable medium as recited in claim 7, wherein the communication service comprises a data synchronization service.

9. A non-transitory computer-readable medium comprising computer-executable instructions which, when executed by a processor of a host server, cause the host server:

to send configuration information to a mobile communication device over a secure connection, the configuration information indicating a key type and a certificate authority;

to receive from the mobile communication device over the secure connection a certificate request that contains a public key and that is signed by a private key, the public key and the private key forming a public-private key pair generated by the mobile communication device, the key pair of the key type indicated in the configuration information;

to send, on behalf of the mobile communication device, the certificate request to the certificate authority indicated in the configuration information; and

to obtain, on behalf of the mobile communication device, a digital certificate signed by the certificate authority, the digital certificate containing the generated public key, and wherein the digital certificate is intended for presentation by the mobile communication device to an authentication server in a certificate-based authentication process to obtain communication access in a network.

10. The non-transitory computer-readable medium as recited in claim 9, wherein the certificate-based authentication process is an extensible authentication protocol (EAP) process.

11. The non-transitory computer-readable medium as recited in claim 9, wherein the network is a wireless local area network (WLAN).

12. The non-transitory computer-readable medium as recited in claim 9, wherein the host server is operative to provide the mobile communication device with a communication service.

13. The non-transitory computer-readable medium as recited in claim 12, wherein the communication service comprises a data synchronization service.

14. The non-transitory computer-readable medium as recited in claim 9, wherein the secure connection is established over a radio link between the mobile communication device and a cellular telecommunications network.

15. The non-transitory computer-readable medium as recited in claim 9, wherein the secure connection is established over a wired connection between the mobile communication device and a computer connected in a local area network to the host server.