METHOD AND SYSTEM FOR AUTOMATICALLY CONFIGURING ACCESS CONTROL

• US 20070207777A1
• Filed: 10/17/2006
• Published: 09/06/2007
• Est. Priority Date: 02/26/2004
• Status: Active Grant

• Current Assignee: Blackberry Limited
• Original Assignee: Blackberry Limited
• Inventors: Adams, Neil, Tyhurst, Timothy, Owen, Russell
• Granted Patent: US 7,532,882 B2
• Time in Patent Office: Days
• US Class Current: 455/411
• CPC Class Codes: H04L 67/34 involving the movement of software or configuration parameters network booting or remote initial program loading [RIPL] G06F9/4416
• CPC Class Codes: H04L 69/329 in the application layer [OSI layer 7]
• CPC Class Codes: H04M 1/72406 by software upgrading or downloading
• CPC Class Codes: H04W 24/02 Arrangements for optimising operational condition

Abstract

A method for automatically configuring an access control point based upon the network resource requirements of an application. The installation of a new application on a mobile device or other user device is accompanied, before, during, or after installation, with the distribution of access control information. An access control point blocks communications based upon access rules. An access update module modifies or sets the access rules based upon the access control information. The access control point and the access update module may be located within the mobile device, within an associated wireless connector system, or in other locations within the mobile communication system. The setting or resetting of the access rules based upon the access control information may be triggered during installation, modification, or removal of the application.

Claims

1. In an access update module, a method of automatically configuring an access control point, the access control point allowing or blocking transmissions between remote network resources and a new application on a user device based upon access rules, the method comprising the steps of:

downloading the new application for installation on the user device, wherein the new application is configured to access the remote network resources during operation;

installing the new application on the user device;

receiving and reading access control information associated with the new application; and

setting the access control rules based upon said access control information in order to permit communications between the new application and the remote network resources.

2. The method claimed in claim 1, wherein said step of downloading comprises downloading an application file to the user device, and wherein said step of setting the access control rules is performed after installation of the application.

3. The method claimed in claim 2, wherein said access control information is embedded within said application file.

4. The method claimed in claim 2, wherein said access control information is stored within a descriptor file associated with said application file, and wherein said step of receiving and reading comprises downloading said descriptor file.

5. The method claimed in claim 4, wherein the application comprises a Java-implemented application, and wherein said descriptor file is a lava Descriptor File.

6. The method claimed in claim 1, wherein said access control information includes an identifier corresponding to the remote network resources.

7. A computer program product having a computer-readable medium tangibly embodying computer executable instructions for automatically configuring an access control point, the access control point allowing or blocking transmissions between remote network resources and an application on a user device based upon access rules, wherein the automatic configuration of the access point occurs in connection with downloading and installing the new application on the user device, and wherein the new application is configured to access the remote network resources during operation, the computer executable instructions creating an access update module comprising:

computer executable instructions for receiving and reading access control information associated with the application; and

computer executable instructions for setting the access control rules based upon said access control information in order to permit communications between the new application and the remote network resources.

8. The computer program product claimed in claim 7, wherein the downloading of the new application includes downloading an application file, wherein said application file installs the application upon the user device, and wherein said computer executable instructions for setting the access control rules execute after installation of the application.

9. The computer program product claimed in claim 8, wherein said access control information is embedded within said application file.

10. The computer program product claimed in claim 8, wherein said access control information is stored within a descriptor file associated with said application file.

11. The computer program product claimed in claim 10, wherein the application comprises a Java-implemented application, and wherein said descriptor file is a lava Descriptor File.

12. The computer program product claimed in claim 8, wherein the application file comprises computer-executable instructions for installing the access update module on the mobile device.

13. The computer program product claimed in claim 7, wherein said access control information includes an identifier corresponding to a said remote network resources.

14. A user device having an access control point, the access control point allowing or blocking transmissions between remote network resources and a new application on the user device based upon access rules, the user device comprising:

means for downloading the new application for installation on the user device, wherein the new application is configured to access the remote network resources during operation;

means for installing the new application on the user device;

means for receiving and reading access control information associated with the new application; and

means for setting the access control rules based upon said access control information in order to permit communications between the new application and the remote network resources.

15. The user device claimed in claim 14, wherein said means for downloading comprise means for downloading an application file to the user device, and wherein said access control information is embedded within said application file.

16. The user device claimed in claim 14, wherein said means for downloading comprise means for downloading an application file to the user device, wherein said access control information is stored within a descriptor file associated with said application file, and wherein said means for receiving and reading comprises means for downloading said descriptor file.

17. The user device claimed in claim 16, wherein the application comprises a Java-implemented application, and wherein said descriptor file is a Java Descriptor File.

18. The user device claimed in claim 14, wherein said access control information includes an identifier corresponding to the remote network resources.