System and method for secure messaging between wireless device and application gateway

• US 20060234731A1
• Filed: 12/22/2005
• Published: 10/19/2006
• Est. Priority Date: 04/18/2005
• Status: Active Grant

• Current Assignee: Malikie Innovations Limited (Key Patent Innovations Limited)
• Original Assignee: Blackberry Limited
• Inventors: Taylor, Sean Paul, Shenfield, Michael, Little, Herbert A., Bibr, Viera, Fritsch, Brindusa
• Granted Patent: US 8,775,791 B2
• Time in Patent Office: Days
• US Class Current: 455/466
• CPC Class Codes: H04L 51/00 User-to-user messaging in packet-switching networks, transmitted according to store-and-forward or real-time protocols, e.g. e-mail
• CPC Class Codes: H04L 63/0442 wherein the sending and receiving network entities apply asymmetric encryption, i.e. different keys for encryption and decryption cryptographic mechanisms or cryptographic arrangements for public-key encryption H04L9/30
• CPC Class Codes: H04L 63/0471 applying encryption by an intermediary, e.g. receiving clear information at the intermediary and encrypting the received information at the intermediary before forwarding
• CPC Class Codes: H04L 63/061 for key exchange, e.g. in peer-to-peer networks cryptographic mechanisms or cryptographic arrangements for key agreement H04L9/0838
• CPC Class Codes: H04L 63/12 Applying verification of the received information cryptographic mechanisms or cryptographic arrangements for data integrity or data verification H04L9/32
• CPC Class Codes: H04L 63/166 at the transport layer
• CPC Class Codes: H04L 67/56 Provisioning of proxy services store-and-forward switching systems in data switching networks H04L12/54
• CPC Class Codes: H04L 67/562 Brokering proxy services
• CPC Class Codes: H04W 12/033 of the user plane, e.g. user's traffic
• CPC Class Codes: H04W 12/04 Key management, e.g. using generic bootstrapping architecture [GBA]
• CPC Class Codes: H04W 80/12 Application layer protocols, e.g. WAP [Wireless Application Protocol]

Abstract

A method and system for secure messaging between a wireless device and an application gateway provides for connecting a device to an application mapping layer via a secure socket and exchanging encryption keys for effecting asymmetric encryption between the device and the application gateway. The encryption has a first set of keys for encrypting messages to the device and decryption a second set of keys for decrypting messages from the device. Accordingly, the present patent disclosure provides an entire solution from end-to-end. Combining a variety of security patterns and technologies in a specific manner to provide a highly secure form of protecting data in a messaging style format between two endpoints on a network. The present patent disclosure provides an optimized strength of encryption on the paths from application mapping layer to wireless device and vice versa. And is able to change in nature to suit the dynamic nature of the payload sizes and transmission rates in the mobile market.

Claims

1. A system for secure messaging between a wireless device and an application gateway, the system comprising:

an application gateway server including a message broker for communicating between the system and the device, the application gateway server configured for communication with a provisioning server and a discovery server and including an application mapping layer for effecting asymmetric encryption between the device and the application gateway and including encryption having a first set of keys for encrypting messages to the device and decryption having a second set of keys for decrypting messages from the device.

2. The system of claim 1, wherein the application mapping layer includes a secure handshake procedure.

3. The system of claim 1, wherein the application mapping layer includes a secure message procedure.

4. The system of claim 1, wherein the application mapping layer includes a secure message container.

5. The system of claim 1, wherein the first set of keys is independent of the second set of keys.

6. The system of claim 5, wherein the first set of keys is selected in dependence upon the decryption capabilities of the device.

7. The system of claim 6, wherein the first set of keys comprise elliptic curve cryptography keys.

8. The system of claim 5, wherein the second set of keys is selected in dependence upon the encryption capabilities of the device.

9. The system of claim 8, wherein the second set of keys comprise RSA keys.

10. A method of secure messaging between a wireless device and an application gateway, the method comprising the steps of:

connecting a device to an application mapping layer via a secure socket; and

exchanging encryption keys for effecting asymmetric encryption between the device and the application gateway and including encryption having a first set of keys for encrypting messages to the device and decryption having a second set of keys for decrypting messages from the device.

11. The method of claim 10, further comprising the steps of encrypting a message to the device using the first set of keys and sending the message to the device.

12. The method of claim 11, wherein the sending includes using a secure message container.

13. The method of claim 10, further comprising the steps of encrypting a message at the device using the second set of keys and sending the message to the application mapping layer.

14. The method of claim 13, wherein the sending includes using a secure message container.

15. The method of claim 10, wherein the first set of keys is independent of the second set of keys.

16. The method of claim 15, wherein the first set of keys is selected in dependence upon the decryption capabilities of the device.

17. The method of claim 16, wherein the first set of keys comprise elliptic curve cryptography keys.

18. The method of claim 15, wherein the second set of keys is selected in dependence upon the encryption capabilities of the device.

19. The method of claim 18, wherein the second set of keys comprise RSA keys.