Application revocation using an application revocation list in a portable electronic device

• US 20070016961A1
• Filed: 07/11/2005
• Published: 01/18/2007
• Est. Priority Date: 07/11/2005
• Status: Abandoned Application

• Current Assignee: Motorola Mobility, Inc. (Lenovo Group Ltd.)
• Original Assignee: Motorola Mobility, Inc. (Lenovo Group Ltd.)
• Inventors: Vogler, Dean, Dabbish, Ezzat, Puhl, Larry
• Application Number:
  US11/178,759
• Publication Number:
  US 20070016961A1
• Time in Patent Office: Days
• US Class Current: 726/30
• CPC Class Codes: G06F 21/51 at application loading time, e.g. accepting, rejecting, starting or inhibiting executable software based on integrity or source reliability
• CPC Class Codes: G06F 21/57 Certifying or maintaining trusted computer platforms, e.g. secure boots or power-downs, version controls, system software checks, secure updates or assessing vulnerabilities
• CPC Class Codes: G06F 8/62 Uninstallation
• CPC Class Codes: H04L 63/0823 using certificates cryptographic mechanisms or cryptographic arrangements for entity authentication involving certificates H04L9/3263
• CPC Class Codes: H04L 63/12 Applying verification of the received information cryptographic mechanisms or cryptographic arrangements for data integrity or data verification H04L9/32
• CPC Class Codes: H04L 63/1441 Countermeasures against malicious traffic countermeasures against attacks on cryptographic mechanisms H04L9/002
• CPC Class Codes: H04M 1/72406 by software upgrading or downloading

Abstract

A portable electronic device (110) contains an application revocation list (ARL) in memory (135) comprising at least one application identifier (AI) uniquely identifying an application. The portable electronic device also contains an application list memory (133) for storing at least application identifiers for trusted applications in the device. A processor (120) operatively connected to the memory determines whether an application identifier on the application revocation list matches an application identifier on the portable electronic device, and, if so, processes a revocation of the application. The application revocation list can be wirelessly updated. Application software in a portable electronic device can thus subsequently be revoked through operation of this application revocation list. A remote server (140) makes application revocation lists available to portable electronic devices over a network such as a cellular system.

Claims

1. An application revocation method for revoking trusted applications within a portable electronic device comprising at least one application having an application identifier, the revocation method comprising the steps of:

(a) obtaining contents of an application revocation list, the application revocation list comprising at least one application identifier; and

(b) determining whether an application identifier in the application revocation list matches an application identifier of an application on the portable electronic device, and if so processing a revocation of the application.

2. An application revocation method according to claim 1, wherein the contents of an application revocation list obtained in said step (a) comprises at least one application identifier identifying a package of applications.

3. An application revocation method according to claim 1, wherein the contents of an application revocation list obtained in said step (a) comprise at least one application identifier that uniquely identifies the application.

4. An application revocation method according to claim 1, wherein an application identifier on the portable device may be derived from the application.

5. An application revocation method according to claim 1, wherein the contents of an application revocation list obtained in said step (a) include a timestamp value associated with the application identifier.

6. An application revocation method according to claim 1, wherein the application revocation list is signed.

7. An application revocation method according to claim 1, wherein the revocation method further comprises the step of (c) verifying the authenticity of the application revocation list.

8. An application revocation method according to claim 1, wherein the revocation method further comprises the step of (c) processing more than one application revocation list.

9. An application revocation method according to claim 1,

wherein the portable electronic device comprises a revocation application;

and

wherein said step (b) of determining is performed by the revocation application.

10. An application revocation method according to claim 1, wherein the processing of the revocation of the application in said step (b) comprises the substep of (b1) removing the application or (b2) restricting or disabling the application.

11. An application revocation method according to claim 1, wherein said step (a) of obtaining the contents of the application revocation list obtains the application revocation list from a remote location.

12. An application revocation method according to claim 1, comprising the step of (c) pushing the application revocation list to the portable electronic device.

13. An application revocation method according to claim 12, wherein said step (c) of pushing comprises pushing the application revocation list to the portable electronic device when the portable electronic device is sensed on a network.

14. An application revocation method according to claim 1,

wherein applications in the portable electronic device are signed by a trusted authority;

and

wherein the entity that determines which applications are placed on the application revocation list is a different entity than the trusted authority that signed the applications.

15. A portable electronic device, comprising:

memory for storing trusted applications, wherein at least one trusted application has an application identifier;

memory for storing contents of at least one application revocation list, the application revocation list comprising at least one application identifier; and

a processor operatively connected to the memory to determine whether an application identifier on the application revocation list matches an application identifier on the portable electronic device, and if so processing a revocation of the application.

16. A portable electronic device according to claim 15, wherein the portable electronic device is a trusted portable electronic device.

17. A portable electronic device according to claim 15, wherein the processor restricts or disables the application processed for revocation or removes from the memory the application processed for revocation.

18. A portable electronic device according to claim 15,

wherein the portable electronic device comprises a communications transceiver;

and

wherein the portable electronic device queries to obtain data for the application revocation list.

19. A portable electronic device according to claim 15, comprising more than one application revocation list.

20. A system wherein applications on a portable electronic device can be revoked over a network, comprising:

a remote server for making application revocation lists available on the network; and

a portable electronic device, comprising a communications transceiver for communicating with the remote server over the network to obtain application revocation lists;

memory for storing contents of the application revocation lists, each application revocation list comprising at least one application identifier; and

a processor operatively connected to the memory to determine whether an application identifier on the application revocation list matches an application identifier for an application on the portable electronic device, and if so processing a revocation of the application so matched.