Communication device, program and recording media

• US 20040142682A1
• Filed: 10/14/2003
• Published: 07/22/2004
• Est. Priority Date: 10/30/2002
• Status: Active Grant

• Current Assignee: NTT Docomo Incorporated (Nippon Telegraph and Telephone Corporation)
• Original Assignee: NTT Docomo Incorporated (Nippon Telegraph and Telephone Corporation)
• Inventors: Kondo, Takashi, Yamada, Kazuhiro, Kamiya, Dai
• Granted Patent: US 7,644,444 B2
• Time in Patent Office: Days
• US Class Current: 455/418
• CPC Class Codes: G06F 21/53 by executing in a restricted environment, e.g. sandbox or secure virtual machine
• CPC Class Codes: H04L 63/168 above the transport layer
• CPC Class Codes: H04M 1/72403 with means for local support of applications that increase the functionality
• CPC Class Codes: H04M 1/72406 by software upgrading or downloading

Abstract

A mobile phone receives a program and identification information of a trusted application for the program, specifies data to be used in executing the program, generates a type of object by selecting either an imperfect encapsulated object or a perfect encapsulated object to be generated on the basis of the identification information of a trusted application, and uses the data by using only the generated object when the program is executed.

Claims

1. A communication device comprising:

a storing means for storing data;

an obtaining means for obtaining a program using a method for accessing data;

an executing means for executing said program, and, in accordance with said program, using data which said program is permitted to use;

a specifying means for specifying, from among data stored in said storing means, data which is required to be used by said program;

a selecting means for selecting from either an imperfect encapsulated object or a perfect encapsulated object for said program, the imperfect encapsulated object being an object utilizing a method to provide data included in the object to a program which accesses the object, and the perfect encapsulated object being an object not utilizing the method;

an object generating means for generating, in accordance with the selection made by said selecting means, either an imperfect encapsulated object or a perfect encapsulated object for said program, the generated object including the data specified by said specifying means; and

an access control means for controlling access to the data specified by said specifying means, and for permitting said executing means to access the data only via the object generated for said program by said object generating means.

2. A communication device according to claim 1,

wherein said program includes information indicating reliability of said program, and said selecting means selects said object on the basis of the information.

3. A communication device according to claim 1, wherein:

said program includes first information indicating a security level required for said data, and second information indicating reliability of said program;

said selecting means selects said object on the basis of the first information; and

said access control means determines whether said object is used by said executing means for accessing said data on the basis of the second information.

4. A communication device according to claim 1,

wherein both said imperfect encapsulated object and said perfect encapsulated object are permitted by said execution means to be used in the case that reliability of said program is high, and only said perfect encapsulated object is permitted by said execution means to be used in the case that reliability of said program is medium, and neither said imperfect encapsulated object nor said perfect encapsulated object is permitted by said execution means to be used in the case that reliability of said program is low.

5. A communication device according to claim 1, wherein:

said program includes first information indicating a security level required for said data, and second information indicating reliability of said program;

said selection means selects said object on the basis of the first information and the second information; and

said access control means determines whether said object is used by said executing means for accessing said data on the basis of the second information.

6. A communication device according to claim 1,

wherein said communication device further comprises a deleting means for deleting said object generated by said generating means at the time of terminating execution of said program.