Method for loading an application in a device, device and smart card therefor

• US 20050234825A1
• Filed: 04/16/2003
• Published: 10/20/2005
• Est. Priority Date: 05/07/2002
• Status: Active Grant

• Current Assignee: Sony Corporation (Sony Group Corp.)
• Original Assignee: Sony Ericsson Mobile Communications AB (Sony Group Corp.)
• Inventors: Andersson, Stefan
• Granted Patent: US 7,900,048 B2
• Time in Patent Office: Days
• US Class Current: 705/51
• CPC Class Codes: G06F 21/51 at application loading time, e.g. accepting, rejecting, starting or inhibiting executable software based on integrity or source reliability
• CPC Class Codes: G06F 8/60 Software deployment
• CPC Class Codes: H04L 2209/80 Wireless
• CPC Class Codes: H04L 63/0823 using certificates cryptographic mechanisms or cryptographic arrangements for entity authentication involving certificates H04L9/3263
• CPC Class Codes: H04L 63/10 for controlling access to devices or network resources
• CPC Class Codes: H04L 9/3265 using certificate chains, trees or paths; Hierarchical trust model
• CPC Class Codes: H04M 1/72406 by software upgrading or downloading
• CPC Class Codes: H04W 12/10 Integrity
• CPC Class Codes: H04W 12/35 Protecting application or service provisioning, e.g. securing SIM application provisioning

Abstract

An application is loaded into a device, such as downloading an application into a portable device, such as a mobile telephone, by downloading the application with a signature to the device. The signature of the application is coupled to a predefined attribute certificate stored in the device. The application and said attribute certificate are then installed together. The signature of the application may be coupled to a root certificate that in turn links the application to a predefined attribute certificate.

Claims

1. A method for loading an application in a device, comprising:

preloading an attribute certificate in the device defining a generic profile of access rights;

downloading the application with a signature to the device;

coupling the signature of the application to the predefined attribute certificate stored in the device;

installing the application coupled to said attribute certificate.

2. A method according to claim 1, wherein-coupling the signature comprises:

coupling the signature of the application to a root certificate that links the application to a predefined attribute certificate.

3. A method according to claim 2, further comprising:

authenticating the application against the stored root certificate.

4. A method according to claim 2 wherein the predefined attribute certificate and the root certificate are stored in files and are linked by having an equal value in their respective file properties.

5. A method according to claim 4, wherein the predefined attribute certificate and the root certificate are stored in a PKCS#15 structure.

6. A method according to claim 1, wherein the predefined attribute certificate is stored in a flash memory.

7. A method according to claim 1, wherein the predefined attribute certificate is stored in a smart card.

8. A method according to claim 7, wherein the smart card is a SIM card.

9. A method according to claim 8, wherein the predefined attribute certificate and the root certificate are changeable by means of a SIM application tool kit.

10. A device comprising:

means for storing and executing an application in connection with function units, the access of which is controlled through an interface unit and;

means for storing at least one predefined attribute certificate defining a generic profile of access rights and linkable to the application for controlling the interface unit.

11. A device according to claim 10, wherein the predefined attribute certificate is linked to a root certificate also stored in the device.

12. A device according to claim 11, wherein the predefined attribute certificate and the root certificate are stored in files and are linked by having an equal value in their respective file properties.

13. A device according to claim 12, wherein the predefined attribute certificate and the root certificate are stored in a PKCS#15 structure.

14. A device according to claim 11, further comprising:

security check means configured to authenticate the application and to link the application to a stored root certificate.

15. A device according to claim 10, further comprising:

a flash memory for storing the predefined attribute certificate.

16. A device according to claim 10, wherein the device is connectable to a smart card for storing the predefined attribute certificate.

17. A device according to claim 16, wherein the smart card is a SIM card.

18. A device according to claim 17, wherein the predefined attribute certificate and the root certificate are changeable by means of a SIM application tool kit.

19. A device according to claim 10, wherein the device is a mobile telephone.

20. A smart card connectable to a device, the device comprising:

means for storing and executing an application in connection with function units, the access of which is controlled through an interface unit; and

means for storing at least one predefined attribute certificate defining a generic profile of access rights and capable of being linked to the application for controlling the interface unit.

21. A smart card according to claim 20, wherein the predefined attribute certificate is linked to a root certificate also stored in the smart card.

22. A smart card according to claim 21, wherein the predefined attribute certificate and the root certificate are stored in files and are linked by having an equal value in their respective file properties.

23. A smart card according to claim 21, wherein the predefined attribute certificate and the root certificate are stored in a PKCS#15 structure.

24. A smart card according to claim 20, wherein the predefined attribute certificate and the root certificate are changeable by means of a SIM application tool kit.