Method and system for automatically configuring access control

• US 20050191991A1
• Filed: 02/26/2004
• Published: 09/01/2005
• Est. Priority Date: 02/26/2004
• Status: Active Grant

• Current Assignee: Blackberry Limited
• Original Assignee: Blackberry Limited
• Inventors: Adams, Neil, Owen, Russell, Tyhurst, Timothy R.
• Granted Patent: US 7,142,848 B2
• Time in Patent Office: Days
• US Class Current: 455/411
• CPC Class Codes: H04L 67/34 involving the movement of software or configuration parameters network booting or remote initial program loading [RIPL] G06F9/4416
• CPC Class Codes: H04L 69/329 in the application layer [OSI layer 7]
• CPC Class Codes: H04M 1/72406 by software upgrading or downloading
• CPC Class Codes: H04W 24/02 Arrangements for optimising operational condition

Abstract

A method for automatically configuring an access control point based upon the network resource requirements of an application. The installation of a new application on a mobile device or other user device is accompanied, before, during, or after installation, with the distribution of access control information. An access control point blocks communications based upon access rules. An access update module modifies or sets the access rules based upon the access control information. The access control point and the access update module may be located within the mobile device, within an associated wireless connector system, or in other locations within the mobile communication system. The setting or resetting of the access rules based upon the access control information may be triggered during installation, modification, or removal of the application.

Claims

1. In an access update module, a method of automatically configuring an access control point, the access control point allowing or blocking transmissions between network resources and an application on a user device based upon access rules, the method comprising the steps of:

receiving and reading access control information associated with the application; and

setting the access control rules based upon said access control information.

2. The method claimed in claim 1, wherein the user device comprises a mobile device and wherein the access control point comprises a device access control point located at said mobile device, and said access control rules comprise device access rules, and wherein said step of setting includes setting said device access rules based upon said access control information.

3. The method claimed in claim 1, wherein the user device comprises a mobile device and wherein the access control point comprises a server access control point located at a wireless connector system associated with said mobile device, and the access control rules comprise server access control rules, and said step of setting includes setting said server access control rules based upon said access control information.

4. The method claimed in claim 1, further including a step of downloading an application file to the user device, wherein said application file installs the application upon the user device, and wherein said step of setting the access control rules is performed after installation of the application.

5. The method claimed in claim 4, wherein said access control information is embedded within said application file.

6. The method claimed in claim 4, wherein said access control information is stored within a descriptor file associated with said application file.

7. The method claimed in claim 6, wherein the application comprises a Java-implemented application, and wherein said descriptor file is a Java Descriptor File.

8. The method claimed in claim 4, wherein said application file includes installation code for the access update module, and wherein the method includes steps of executing said installation code and installing the access update module on the mobile device.

9. The method claimed in claim 1, wherein said access control information includes an identifier corresponding to the network resources.

10. A computer program product having a computer-readable medium tangibly embodying computer executable instructions for automatically configuring an access control point, the access control point allowing or blocking transmissions between network resources and an application on a user device based upon access rules, the computer executable instructions creating an access update module and including:

computer executable instructions for receiving and reading access control information associated with the application; and

computer executable instructions for setting the access control rules based upon said access control information.

11. The computer program product claimed in claim 10, wherein the user device comprises a mobile device and wherein the access control point comprises a device access control point located at said mobile device, and said access control rules comprise device access rules, and wherein said computer executable instructions for setting include computer executable instructions for setting said device access rules based upon said access control information.

12. The computer program product claimed in claim 10, wherein the user device comprises a mobile device and wherein the access control point comprises a server access control point located at a wireless connector system associated with said mobile device, and the access control rules comprise server access control rules, and said computer executable instructions for setting include computer executable instructions for setting said server access control rules based upon said access control information.

13. The computer program product claimed in claim 10, further including computer executable instructions for downloading an application file to the user device, wherein said application file installs the application upon the user device, and wherein said computer executable instructions for setting the access control rules execute after installation of the application.

14. The computer program product claimed in claim 13, wherein said access control information is embedded within said application file.

15. The computer program product claimed in claim 13, wherein said access control information is stored within a descriptor file associated with said application file.

16. The computer program product claimed in claim 15, wherein the application comprises a Java-implemented application, and wherein said descriptor file is a Java Descriptor File.

17. The computer program product claimed in claim 13, further including computer executable instructions within the application file for installing the access update module on the mobile device.

18. The computer program product claimed in claim 10, wherein said access control information includes an identifier corresponding to a remote network resource.