System and method for processing encoded messages for exchange with a mobile data communication device

• US 20050163320A1
• Filed: 03/25/2005
• Published: 07/28/2005
• Est. Priority Date: 06/12/2001
• Status: Active Grant

• Current Assignee: Malikie Innovations Limited (Key Patent Innovations Limited)
• Original Assignee: Blackberry Limited
• Inventors: Adams, Neil P., Brown, Michael S., Brown, Michael K., Kirkup, Michael G., Little, Herbert A.
• Granted Patent: US 7,827,406 B2
• Time in Patent Office: Days
• US Class Current: 380/270
• CPC Class Codes: G06Q 10/107 Computer-aided management of electronic mailing [e-mailing]
• CPC Class Codes: H04L 12/189 in combination with wireless systems selective distribution or broadcast in wireless communication networks H04W4/06
• CPC Class Codes: H04L 51/066 Format adaptation, e.g. format conversion or compression
• CPC Class Codes: H04L 51/58 Message adaptation for wireless communication
• CPC Class Codes: H04L 63/0428 wherein the data content is protected, e.g. by encrypting or encapsulating the payload
• CPC Class Codes: H04L 63/0442 wherein the sending and receiving network entities apply asymmetric encryption, i.e. different keys for encryption and decryption cryptographic mechanisms or cryptographic arrangements for public-key encryption H04L9/30
• CPC Class Codes: H04L 63/062 for key distribution, e.g. centrally by trusted party cryptographic mechanisms or cryptographic arrangements for key distribution involving a central third party H04L9/0819
• CPC Class Codes: H04L 63/0823 using certificates cryptographic mechanisms or cryptographic arrangements for entity authentication involving certificates H04L9/3263
• CPC Class Codes: H04L 63/101 Access control lists [ACL]
• CPC Class Codes: H04L 63/126 the source of the received data
• CPC Class Codes: H04L 67/04 specially adapted for terminals or networks with limited capabilities; specially adapted for terminal portability
• CPC Class Codes: H04L 67/565 Conversion or adaptation of application format or content adding application control or application functional data H04L67/561
• CPC Class Codes: H04L 67/5651 Reducing the amount or size of exchanged application data
• CPC Class Codes: H04L 69/329 in the application layer [OSI layer 7]
• CPC Class Codes: H04L 9/3247 involving digital signatures
• CPC Class Codes: H04W 12/02 Protecting privacy or anonymity, e.g. protecting personally identifiable information [PII]
• CPC Class Codes: H04W 12/033 of the user plane, e.g. user's traffic
• CPC Class Codes: H04W 12/04 Key management, e.g. using generic bootstrapping architecture [GBA]
• CPC Class Codes: H04W 12/06 Authentication
• CPC Class Codes: H04W 24/02 Arrangements for optimising operational condition
• CPC Class Codes: H04W 4/16 : Communication-related supplementary services, e.g. call-transfer or call-hold
• CPC Class Codes: H04W 40/02 : Communication route or path selection, e.g. power-based or shortest path routing

Abstract

A system and method are provided for pre-processing encrypted and/or signed messages at a host system before the message is transmitted to a wireless mobile communication device. The message is received at the host system from a message sender. There is a determination as to whether any of the message receivers has a corresponding wireless mobile communication device. For each message receiver that has a corresponding wireless mobile communication device, the message is processed so as to modify the message with respect to one or more encryption and/or authentication aspects. The processed message is transmitted to a wireless mobile communication device that corresponds to the first message receiver. The system and method may include post-processing messages sent from a wireless mobile communications device to a host system. Authentication and/or encryption message processing is performed upon the message. The processed message may then be sent through the host system to one or more receivers.

Claims

1. A method for processing an encrypted message at a host system before the message is transmitted to a wireless mobile communication device, the method comprising:

storing at the host system a private encryption key for decoding messages encrypted with a first encryption algorithm;

receiving the encrypted message at the host system, the encrypted message being encrypted using the first encryption algorithm;

decrypting the encrypted message at the host system using the stored private encryption key;

processing the decrypted message to reformat the decrypted message into a format for the wireless mobile communication device;

re-encrypting the decrypted message at the host system; and

transmitting the re-encrypted message to the wireless mobile communication device.

2. The method of claim 1, wherein the step of processing the decrypted message comprises the step of truncating the decrypted message by removing unnecessary data.

3. The method of claim 1, wherein the step of processing the decrypted message comprises the step of reordering portions of the decrypted message.

4. The method of claim 1, wherein the step of processing the decrypted message comprises the steps of:

reordering portions of the decrypted message; and

removing unnecessary data from the decrypted message.

5. The method of claim 2, wherein the unnecessary data includes portions of a digital signature.

6. The method of claim 2, wherein the unnecessary data includes message text that is formatted in an alternate message format.

7. The method of claim 1, wherein the step of re-encrypting the decrypted message comprises re-encrypting the decrypted message using a second encryption algorithm.

8. The method of claim 7, wherein the second encryption algorithm is selected for use in a wireless network.

9. The method of claim 3, wherein the decrypted message is reordered to place a message text portion first.

10. The method of claim 9, wherein the decrypted message is further reordered to place a signature portion after the message text portion.

11. The method of claim 10, wherein the decrypted message is further reordered to place a certificate chain (“

Cert Chain”

) portion and a CRL portion of the message after the signature portion.

12. A redirection server for forwarding electronic messages from a message server to a wireless mobile communication device, the redirection server comprising:

a processing device;

a memory device; and

a redirection program stored in the memory device and executable by the processing device, the redirection program when executed by the processing device being operable to communicate with the message server to detect when an electronic message is received and to transmit electronic messages to the wireless mobile communication device;

the redirection program further operable to decrypt the electronic message, process the decrypted message to reformat the decrypted message into a format for the wireless mobile communication device and re-encrypt the message for transmission to the wireless mobile communication device.

13. The redirection server of claim 12, wherein the redirection program is further operable to re-encrypt the message using a different encryption algorithm than originally used to encrypt the received electronic message.

14. The redirection server of claim 13, wherein the different encryption algorithm is selected for use in a wireless network.

15. The redirection server of claim 12, wherein the redirection program is operable to reformat the decrypted message by truncating the decrypted message to remove unnecessary data.

16. The redirection server of claim 12, wherein the redirection program is operable to reformat the decrypted message by reordering portions of the decrypted message.

17. The redirection server of claim 12, wherein the redirection program is operable to reformat the decrypted message by reordering portions of the decrypted message and removing unnecessary data from the decrypted message.

18. The redirection server of claim 15, wherein the unnecessary data includes portions of a digital signature.

19. The redirection server of claim 15, wherein the unnecessary data includes message text that is formatted in an alternate message format.

20. The redirection server of claim 16, wherein the decrypted message is reordered to place a message text portion first.

21. The redirection server of claim 20, wherein the decrypted message is further reordered to place a signature portion after the message text portion.

22. The redirection server of claim 21, wherein the decrypted message is further reordered to place a Cert Chain portion and a CRL portion of the message after the signature portion.

23. A system for redirecting electronic messages from a message server to a wireless mobile communication device, comprising:

means for detecting an electronic message received by an electronic messaging program that is encrypted using a first encryption algorithm;

means for decrypting the electronic message using a private key associated with the wireless mobile communication device;

means for processing the decrypted message to reformat the decrypted message into a format for the wireless mobile communication device;

means for re-encrypting the decrypted message; and

means for transmitting the re-encrypted message to the wireless mobile communication device.