Test enabled application execution

• US 20030060189A1
• Filed: 08/15/2002
• Published: 03/27/2003
• Est. Priority Date: 08/15/2001
• Status: Active Grant

• Current Assignee: Qualcomm, Inc.
• Original Assignee: Qualcomm, Inc.
• Inventors: Minear, Brian, Chmaytelli, Mazen, Lundblade, Laurence, Oliver, Mitchell B.
• Granted Patent: US 7,096,004 B2
• Time in Patent Office: Days
• US Class Current: 455/411
• CPC Class Codes: G06F 21/335 for accessing specific resources, e.g. using Kerberos tickets
• CPC Class Codes: G06F 21/51 at application loading time, e.g. accepting, rejecting, starting or inhibiting executable software based on integrity or source reliability
• CPC Class Codes: G06F 21/57 Certifying or maintaining trusted computer platforms, e.g. secure boots or power-downs, version controls, system software checks, secure updates or assessing vulnerabilities
• CPC Class Codes: G06F 2221/2129 Authenticate client device independently of the user
• CPC Class Codes: G06F 2221/2141 Access rights, e.g. capability lists, access control lists, access tables, access matrices
• CPC Class Codes: G06F 2221/2149 Restricted operating environment
• CPC Class Codes: G06F 9/468 Specific access rights for resources, e.g. using capability register
• CPC Class Codes: H04L 63/102 Entity profiles
• CPC Class Codes: H04L 63/12 Applying verification of the received information cryptographic mechanisms or cryptographic arrangements for data integrity or data verification H04L9/32
• CPC Class Codes: H04W 12/08 Access security
• CPC Class Codes: H04W 12/10 Integrity
• CPC Class Codes: H04W 12/71 Hardware identity

Abstract

Systems and methods consistent with the present invention provides safe and secure application distribution and execution and controls the risk of providing a test environment associated with the testing of applications. Test enabled permissions are created and distributed to selected application test entities. A management function is used to aid in distributing the test-enabled permissions. The risk is controlled by providing closer scrutiny of the identity of the test entity prior to distributing a test enabled permission to the test entity, providing expiration times associated with the test enabled permissions, and limiting the number of test enabled permissions distributed. The management function tracks the distribution of the test-enabled permissions.

Claims

1. A method for executing an application on a wireless device, comprising:

receiving a permission associated with the wireless device;

requesting the execution of the application on the wireless device;

evaluating the permission associated with the wireless device using a rule stored in the wireless device; and

executing the application in the event the evaluation of the permission and the rule indicate the application is allowed to execute.

2. The method of claim 1 further comprising:

requesting the execution of a second application on the wireless device; and

executing a second application in response to a second evaluation of the permission and the rule indicating the second application is allowed to execute.

3. The method of claim 1 further comprising receiving a unique identifier code, wherein the evaluation of the permission includes using the unique identifier code.

4. A method for accessing applications on a wireless device, comprising:

requesting an application independent permission for the wireless device;

receiving the application independent permission;

initiating the access of a first application on the wireless device;

evaluating the first application independent permission on the wireless device; and

accessing the first application in the event the evaluation of the application independent permission indicates access is allowed.

5. The method of claim 4 further comprising submitting profile information.

6. The method of claim 4 further comprising denying the accessing of the application in the event the evaluation of the application independent permission indicates access is allowed.

7. The method of claim 4, wherein the accessing of the first application includes attempting to execute the application.

8. The method of claim 4 wherein the evaluation of the first application includes using a unique identifier associated with the wireless device.

9. The method of claim 4 wherein the evaluating of the first application independent permission includes evaluating a modification detection technique.

10. The method of claim 4, wherein the application independent permission is a test-enabled permission.

11. A wireless device, comprising:

an input to receive an application independent permission;

a storage to store the application independent permission and a unique identifier associated with the wireless device; and

a control program configured to determine access to an application by evaluating the application independent permission and the unique identifier.

12. The wireless device of claim 11, wherein the application independent identifier is a test-enabled permission.

13. The wireless device of claim 11, wherein the control program is further configured to access a second application by evaluating the application independent permission and the unique identifier.

14. The wireless device of claim 11, wherein the unique identifier is an electronic serial number (“

ESN”

).

15. A method for managing application independent permissions, comprising:

storing profile information related to a wireless device;

receiving a request by an entity for an application independent permission for the wireless device;

assigning the application independent permission for the wireless device; and

transmitting the application independent permission to the wireless device.

16. The method of claim 15 wherein assigning the application independent permission includes binding the application independent permission with a unique identifier associated with the wireless device and wherein transmitting the application independent permission includes transmitting the unique identifier.

17. The method of claim 15 wherein the application independent permission is assigned based on profile information.

18. A system for accessing applications on a wireless device, comprising:

means for requesting an application independent permission for the wireless device;

means for receiving the application independent permission;

means for initiating the access of a first application on the wireless device;

means for evaluating the first application independent permission on the wireless device; and

means for accessing the first application in the event the evaluation of the application independent permission indicates access is allowed.

19. A computer-readable medium containing computer-executable instructions for accessing application on a wireless device that when executed perform a method, comprising:

requesting an application independent permission for the wireless device;

receiving the application independent permission;

initiating the access of a first application on the wireless device;

evaluating the first application independent permission on the wireless device; and

accessing the first application in the event the evaluation of the application independent permission indicates access is allowed.

20. A method of managing testing on a device, comprising:

receiving profile information of a testing entity;

evaluating the profile information of the testing entity;

sending a testing key associated with the device; and

tracking the distribution of the testing key.

21. The method of claim 20, wherein the testing key is a test enabled permission.

22. The method of claim 20 further comprising assigning an expiration period associated with the testing key, where upon the testing key becomes invalid at the end of the expiration period.

23. The method of claim 20 further comprising testing a plurality of applications on the device, wherein the testing of the plurality of applications includes an evaluation of the testing key prior to executing each of the plurality of applications.

24. The method of claim 20, wherein the device is a wireless device.

25. A computer-readable medium containing computer-executable instructions for managing testing on a device that when executed perform a method, comprising:

receiving profile information of a testing entity;

evaluating the profile information of the testing entity;

sending a testing key associated with the device;

tracking the distribution of the testing key.