System for managing program stored in storage block of mobile terminal

• US 20030236867A1
• Filed: 01/22/2003
• Published: 12/25/2003
• Est. Priority Date: 05/14/2001
• Status: Active Grant

• Current Assignee: NTT Docomo Incorporated (Nippon Telegraph and Telephone Corporation)
• Original Assignee: NTT Docomo Incorporated (Nippon Telegraph and Telephone Corporation)
• Inventors: Yamamoto, Masaaki, Washio, Satoshi, Kawabata, Hiroshi, Natsuno, Takeshi
• Granted Patent: US 7,379,731 B2
• Time in Patent Office: Days
• US Class Current: 709/220
• CPC Class Codes: G06F 21/10 Protecting distributed programs or content, e.g. vending or licensing of copyrighted material protection in video systems or pay television H04N7/16 ; Digital rights management [DRM]
• CPC Class Codes: G06F 21/51 at application loading time, e.g. accepting, rejecting, starting or inhibiting executable software based on integrity or source reliability
• CPC Class Codes: G06F 21/52 during program execution, e.g. stack integrity ; Preventing unwanted data erasure; Buffer overflow
• CPC Class Codes: G06F 21/54 by adding security routines or objects to programs
• CPC Class Codes: G06F 2221/2113 Multi-level security, e.g. mandatory access control
• CPC Class Codes: H04L 63/0442 wherein the sending and receiving network entities apply asymmetric encryption, i.e. different keys for encryption and decryption cryptographic mechanisms or cryptographic arrangements for public-key encryption H04L9/30
• CPC Class Codes: H04L 63/0823 using certificates cryptographic mechanisms or cryptographic arrangements for entity authentication involving certificates H04L9/3263
• CPC Class Codes: H04M 1/72406 by software upgrading or downloading

Abstract

Management server 16 obtains application programs from content server 20 in response to requests of mobile terminal 11, and transmits the obtained application programs to mobile terminal 11 with information concerning reliabilities of the application programs. After mobile terminal 11 receives the application programs from management server 16, mobile terminal 11 manages operations of the application programs, which are coordinated with operations of other programs using the information concerning the reliabilities corresponding to the application programs. According to the management of coordinated operations of a plurality of application programs as stated above, problems concerning information security, where valuable information may be leaked unexpectedly because of operations of low reliable application programs, can be avoided. As a result, convenience of users of mobile terminals 11 can be improved without deteriorating the information security of mobile terminals 11.

Claims

1. A method for managing programs, said method comprising:

a program-obtaining step of a mobile terminal obtaining a program, which can be executed by said mobile terminal, and storing said program in a memory of said mobile terminal;

a coordination information-obtaining step of said mobile terminal obtaining coordination information, which is used for managing at least one of start of another program, which is other than said program, by said program and communication of data with said other program, and storing said coordination information in a memory of said mobile terminal, and;

an operation-managing step of said mobile terminal determining conditions of at least one of start of said other program and communication of data with said other program on the basis of said coordination information, which corresponds to said program, in the instance that said other program is requested to execute an operation when said program, which is stored in said memory, is under execution.

2. A method for managing programs according to claim 1, wherein:

said mobile terminal obtains said coordination information, from a managing server for managing said coordination information, through a communication network, in said coordination information-obtaining step.

3. A method for managing programs according to claim 1, wherein:

said mobile terminal obtains said program, from a delivering server for delivering programs, through a communication network, in said program-obtaining step.

4. A method for managing programs according to claim 1, wherein said method further comprises:

a certificate-preparing step of a certification server, which is able to communicate with said mobile terminal through a communication network, preparing certificate information for certifying correctness of at least one of said program and said coordination information, and;

a certificate information-obtaining step of said mobile terminal obtaining said certificate information from said certification server through said communication network;

wherein,

said mobile terminal permits or prohibits an operation of said program in said mobile terminal on the basis of said certificate information.

5. A method for managing programs according to claim 4, wherein:

said certificate information is prepared by encryption of at least one of said program and said coordination information by use of a cryptograph key, and;

said mobile terminal permits said operation of said program in the instance that at least one of said program and said coordination information, which is encrypted, is able to be decrypted.

6. A method for managing programs according to claim 5, wherein:

said cryptograph key is a secret key in a public key system.

7. A method for managing programs according to claim 4, wherein:

said certificate information is a message digest which is a digest of at least one of said program and said coordination information, and;

said mobile terminal permits said operation of said program on the basis of a result of verification between said certificate information and a message digest of at least one of said program and said coordination information, which is generated by said mobile terminal.

8. A method for managing programs according to claim 2, wherein said method further comprises:

a storage data-preparing step of said managing server preparing storage data concerning the state of storage of said program in said mobile terminal;

a management data-preparing step of said managing server preparing management data for managing said program in said mobile terminal on the basis of said storage data, and;

a management data-obtaining step of said mobile terminal obtaining said management data from said managing server;

wherein,

said mobile terminal manages said program in said mobile terminal on the basis of said management data.

9. A method for managing programs according to claim 8, wherein:

said mobile terminal permits or prohibits an operation of said program in said mobile terminal on the basis of said management data.

10. A method for managing programs according to claim 9, wherein:

said mobile terminal notifies a permission of said operation of said program, by use of at least one of letter, image, sound, and vibration, in the instance that said mobile terminal permits said operation of said program.

11. A method for managing programs according to claim 8, wherein:

said mobile terminal deletes said program in said mobile terminal on the basis of said management data.

12. A method for managing programs according to claim 8, wherein:

said communication network contains a service-charge levying server for managing service-charge accounts of said program; and

said method further comprises a service-charge data-obtaining step of said service-charge levying server obtaining at least a part of said management data as service-charge data;

wherein,

said service-charge levying server manages said service-charge accounts of said program on the basis of said service-charge data.

13. A method for managing programs according to claim 2, wherein said method further comprises:

a request-obtaining step of said managing server obtaining a preparation request for preparing transmission of a program, and;

a transmission-preparing step of said managing server preparing transmission of said program to said mobile terminal in response to said preparation request;

wherein,

said mobile terminal obtains said program, which is prepared for transmission in said transmission-preparing step, in said program-obtaining step.

14. A method for managing programs according to claim 13, wherein:

said managing server prepares at least one of said program and location information, which indicates location where said program is stored, in said transmission preparing step.

15. A method for managing programs according to claim 13, wherein said method further comprises:

a completion notice-transmitting step of said managing server transmitting a completion notice for notifying completion of preparing transmission of said program, to said mobile terminal, when said transmission-preparing step is completed, and;

a completion notice-receiving step of said mobile terminal receiving said completion notice from said managing server;

wherein,

said mobile terminal notifies that said program is ready for transmission, by use of at least one of letter, image, sound, and vibration, when said mobile terminal receives said completion notice.

16. A method for managing programs according to claim 13, wherein:

said communication network contains a service-charge levying server for managing service-charge accounts of said program;

a preparation data-preparing step of said managing server preparing transmission preparation data, which indicate that preparation for transmission of said program to said mobile terminal is completed in response to said preparation request, and;

a service-charge data-obtaining step of said service-charge levying server obtaining at least a part of said transmission preparation data as service-charge data;

wherein,

said service-charge levying server manages said service-charge accounts of said program on the basis of said service-charge data.

17. A program management system, said system comprising:

a communication network, which contains a delivering server, a managing server, and a mobile terminal;

wherein,

said delivery server comprises a program-storing unit for storing a program, and a program-transmitting unit for transmitting said program to said mobile terminal;

said managing server comprises a coordination information-storing unit for storing coordination information, concerning control of coordinated operations of said program and another program, which is other than said program, and a coordination information-transmitting unit for transmitting said coordination information to said mobile terminal, and;

said mobile terminal comprises a program-receiving unit for receiving said program from said delivering server, a coordination information-receiving unit for receiving said coordination information from said managing server, a program-storing unit for storing said program, a coordination information-storing unit for storing said coordination information, and an operation-managing unit for determining conditions of at least one of start of said other program and communication of data with said other program on the basis of said coordination information, which corresponds to said program, in the instance that said other program is requested to execute an operation when said program is under execution.

18. A server for a communication network containing a mobile terminal, said server comprises:

a coordination information-storing unit for storing coordination information, which is used for determining conditions of at least one of start of a program and communication of data with said program in the instance that said program is requested to execute an operation when another program, which is other than said program, is under execution, and;

a coordination information-transmitting unit for transmitting said coordination information to said mobile terminal.

19. A server according to claim 18, wherein said server further comprises:

a certificate-preparing unit for preparing certificate information for certifying correctness of at least one of said program and said coordination information, and;

a certificate-transmitting unit for transmitting said certificate information to said mobile terminal.

20. A server according to claim 19, wherein:

said certificate-preparing unit comprises an encrypting unit for encrypting at least one of said program and said coordination information.

21. A server according to claim 20, wherein:

said encrypting unit comprises a secret key-storing unit for storing a secret key in a public key system.

22. A server according to claim 19, wherein:

said certificate-preparing unit comprises a message digest-preparing unit for preparing a message digest, which is a digest of at least one of said program and said coordination information.

23. A server according to claim 18, wherein said server further comprises:

a storage data-preparing unit for preparing storage data concerning the state of storage of said program in said mobile terminal;

a management data-preparing unit for preparing management data for managing said program in said mobile terminal on the basis of said storage data, and;

a management data-transmitting unit for transmitting said management data to said mobile terminal.

24. A server according to claim 23, wherein said server further comprises:

a service-charge data-transmitting unit for transmitting at least a part of said management data as service-charge data to a service-charge levying server for managing service-charge accounts, contained in said communication network.

25. A server according to claim 18, wherein said server further comprises:

a request-receiving unit for receiving a preparation request for requesting said program-transmitting unit to prepare transmission of said program, and;

a transmission-preparing unit for preparing transmission of said program to said mobile terminal in response to said preparation request.

26. A server according to claim 25, wherein:

said transmission-preparing unit comprises a preparation information-storing unit for storing at least one of said program and location information, which indicates location where said program is stored.

27. A server according to claim 25, wherein said server further comprises:

a completion notice-transmitting unit for transmitting a completion notice for notifying completion of preparing transmission of said program, to said mobile terminal, when preparation for transmission of said program is completed.

28. A server according to claim 25, wherein said server further comprises:

a preparation data-preparing unit for preparing transmission preparation data, which indicate that preparation for transmission of said program to said mobile terminal is completed in response to said preparation request, and;

a service-charge data-transmitting unit for transmitting at least a part of said transmission preparation data as service-charge data to a service-charge levying server for managing service-charge accounts, contained in said communication network.

29. A mobile terminal comprises:

a program-storing unit for storing a program;

a coordination information-storing unit for storing coordination information concerning control of coordinated operations of said program and another program, which is other than said program, and;

an operation-managing unit for determining conditions of at least one of start of said other program and communication of data with said other program on the basis of said coordination information in the instance that said other program is requested to execute an operation when said program is under execution.

30. A mobile terminal contained in a communication network, which contains a delivering server for delivering programs and a managing server for managing programs, said mobile terminal comprises:

a program-receiving unit for receiving a program from said delivering server;

a program-storing unit for storing said program;

a coordination information-receiving unit for receiving coordination information concerning control of coordinated operations of said program and another program, which is other than said program, from said managing server;

a coordination information-storing unit for storing said coordination information, and;

an operation-managing unit for determining conditions of at least one of start of said other program and communication of data with said other program on the basis of said coordination information in the instance that said other program is requested to execute an operation when said program is under execution.

31. A mobile terminal according to claim 30, wherein said mobile terminal further comprises:

a certificate-receiving unit for receiving certificate information for certifying correctness of at least one of said program and said coordination information, from said managing server, and;

an operation-permitting unit for permitting or prohibiting an operation of said program on the basis of said certificate information.

32. A mobile terminal according to claim 31, wherein:

said operation-permitting unit comprises a decrypting unit for decrypting at least one of said program and said coordination information in the instance that at least one of said program and said coordination information is encrypted.

33. A mobile terminal according to claim 32, wherein:

said decrypting unit comprises a public key-storing unit for storing a public key of said managing server in a public key system.

34. A mobile terminal according to claim 31, wherein:

said operation-permitting unit comprises a message digest-preparing unit for preparing a message digest, which is a digest of at least one of said program and said coordination information.

35. A mobile terminal according to claim 30, wherein said mobile terminal further comprises:

a management data-receiving unit for receiving management data for managing said program, from said managing server, and;

a managing unit for managing said program on the basis of said management data.

36. A mobile terminal according to claim 35, wherein said mobile terminal further comprises:

a notifying unit for notifying a permission of said operation of said program, by use of at least one of letter, image, sound, and vibration, in the instance that said managing unit permits said operation of said program.

37. A mobile terminal according to claim 30, wherein said mobile terminal further comprises:

a request-transmitting unit for transmitting a preparation request for preparing transmission of said program, to said managing server.

38. A mobile terminal according to claim 37, wherein said mobile terminal further comprises:

a completion notice-receiving unit for receiving a completion notice for notifying completion of preparing transmission in response to said preparation request, from said managing server, and;

a notifying unit for notifying that said program is ready for transmission, by use of at least one of letter, image, sound, and vibration, when said completion notice is received.

39. A program, said program permitting a computer of a managing server for managing programs in a communication network, which contains a mobile terminal:

to transmit coordination information, which is used in said mobile terminal for determining conditions of at least one of start of a program and communication of data with said program in the instance that said program is requested to execute an operation when another program, which is other than said program, is under execution, to said mobile terminal.

40. A program according to claim 39, said program further permitting said computer of said managing server:

to prepare certificate information for certifying correctness of at least one of a program, which is executed in said mobile station, and said coordination information, and;

transmit said certificate.

41. A program, said program permitting a computer of a mobile terminal:

to obtain coordination information concerning control of coordinated operations of programs, and;

determine conditions of at least one of start of a program and communication of data with said program in the instance that said program is requested to execute an operation when another program, which is other than said program, is under execution.

42. A program according to claim 41, said program further permitting said computer of said mobile terminal:

to obtain certificate information for certifying correctness of at least one of said program, said other program, and said coordination information, and;

permit or prohibit operations of at least one of said program and said other program on the basis of said certificate information.

43. A record medium, said medium containing a program for permitting a computer of a managing server for managing programs in a communication network, which contains a mobile terminal:

to transmit coordination information, which is used in said mobile terminal for determining conditions of at least one of start of a program and communication of data with said program in the instance that said program is requested to execute an operation when another program, which is other than said program, is under execution, to said mobile terminal.

44. A record medium, said medium containing a program according to claim 43, said program further permitting said computer of said managing server:

to prepare certificate information for certifying correctness of at least one of a program, which is executed in said mobile station, and said coordination information, and;

transmit said certificate.

45. A record medium, said medium containing a program for permitting a computer of a mobile terminal:

to obtain coordination information concerning control of coordinated operations of programs, and;

determine conditions of at least one of start of a program and communication of data with said program in the instance that said program is requested to execute an operation when another program, which is other than said program, is under execution.

46. A record medium, said medium containing a program according to claim 45, said program further permitting said computer of said mobile terminal:

to obtain certificate information for certifying correctness of at least one of said program, said other program, and said coordination information, and;

permit or prohibit operations of at least one of said program and said other program on the basis of said certificate information.