System and method for updating message trust status

• US 20060053291A1
• Filed: 09/07/2004
• Published: 03/09/2006
• Est. Priority Date: 09/07/2004
• Status: Active Grant

• Current Assignee: Malikie Innovations Limited (Key Patent Innovations Limited)
• Original Assignee: Blackberry Limited
• Inventors: Brown, Michael S., Brown, Michael K., Little, Herbert A.
• Granted Patent: US 7,509,120 B2
• Time in Patent Office: Days
• US Class Current: 713/175
• CPC Class Codes: H04L 2209/24 Key scheduling, i.e. generating round keys or sub-keys for block encryption
• CPC Class Codes: H04L 2209/72 Signcrypting, i.e. digital signing and encrypting simultaneously
• CPC Class Codes: H04L 2209/80 Wireless network architectures or network communication protocols for wireless network security H04W12/00
• CPC Class Codes: H04L 63/123 received data contents, e.g. message integrity
• CPC Class Codes: H04L 9/3247 involving digital signatures
• CPC Class Codes: H04L 9/3265 using certificate chains, trees or paths; Hierarchical trust model

Abstract

Systems and methods for processing encoded messages within a wireless communications system are disclosed. A server within the wireless communications system performs signature verification of an encoded message and provides, together with the message, an indication to the mobile device that the message has been verified. In addition, the server provides supplemental information, such as, for example, a hash of the certificate or certificate chain used to verify the message, to the device, to enable the device to perform additional checks on the certificate, such as, for example, validity checks, trust checks, strength checks, or the like.

Claims

1. A method for processing encoded messages comprising:

receiving an encoded message at a server;

processing said encoded message at said server and providing an indication of a result of said processing and the received message to a device for which the encoded message is intended;

providing supplemental information of said message from said server to said device; and

processing at said device of said supplemental information to provide additional security information related to said message.

2. The method according to claim 1, wherein said device is a mobile wireless communications device.

3. The method according to claim 1, wherein said processing includes verification of the encoded message.

4. The method according to claim 3, wherein said verification includes verifying a signature of the encoded message.

5. The method according to claim 4, wherein said supplemental information includes a hash of a certificate used to sign the encoded message.

6. The method according to claim 4, wherein said supplemental information includes a hash of a certificate chain including the certificate used to sign the encoded message.

7. The method according to claim 5, wherein said processing of said supplemental information comprises looking up the certificate used to sign the message and performing additional checks based on the certificate used to sign the message.

8. The method according to claim 6, wherein said processing of said supplemental information comprises looking up the certificate and/or certificate chain used to sign the message and performing additional checks based on the certificate used to sign the message.

9. The method according to claim 7, wherein said additional checks include validity checks, trust checks and/or strength checks.

10. The method according to claim 8, wherein said additional checks include validity checks, trust checks and/or strength checks.

13. The method according to claim 11, wherein said supplemental information includes a hash of a certificate chain including the certificate used to sign the encoded message.

15. The method according to claim 13, wherein said processing of said supplemental information comprises looking up the certificate and/or certificate chain used to sign the message and performing additional checks based on the certificate used to sign the message.

17. The method according to claim 15, wherein said additional checks include validity checks, trust checks and/or strength checks.

11. A system for verifying encoded electronic messages, comprising:

a server for receiving an encoded message intended for a mobile device;

program logic resident on said server for processing said encoded message at said server to verify a signature appended to said received message, providing an indication of a result of said processing of the received message to a device for which the encoded message is intended, and providing supplemental information of said message from said server to said device; and

a wireless communications device for receiving messages from said server, said wireless communications device including program logic for processing said supplemental information at said device to provide checks associated with said signature.

12. The method according to claim 11, wherein said supplemental information includes a hash of a certificate used to sign the encoded message.

14. The method according to claim 12, wherein said processing of said supplemental information comprises looking up the certificate used to sign the message and performing additional checks based on the certificate used to sign the message.

16. The method according to claim 14, wherein said additional checks include validity checks, trust checks and/or strength checks.

18. A system for verifying encoded electronic messages comprising:

a server;

a mobile wireless communications device;

means for receiving an encoded electronic message at a server, the encoded message being intended for said mobile wireless communications device;

means for processing said encoded message at said server to verify a signature appended to said received message, providing an indication of a result of said processing of the received message to a device for which the encoded message is intended, and providing supplemental information of said message from said server to said device; and

said mobile wireless communications device receiving messages from said server, said mobile wireless communications device including program logic for processing said supplemental information at said device to provide checks associated with said signature.

19. A method for processing encoded messages comprising:

sending supplemental information associated with an encoded electronic message from a server to a mobile device, the supplemental information including a hash of a certificate or certificate chain used to sign the encoded message; and

processing said supplemental information by said mobile device to determine the certificate used to sign the message and performing additional checks on said certificate.

20. A method for processing encoded messages comprising:

receiving an encoded message at a server;

processing said encoded message at said server to verify the encoded message and providing an indication of a result of said processing and the received message to a device for which the encoded message is intended;

providing supplemental information of said message from said server to said device, said supplemental information including a hash of a certificate used to sign the encoded message; and

processing at said device of said supplemental information to look up the certificate used to sign the encoded message and to update trust status of said message based on information contained in the certificate.