Method, electronic device, apparatus, system and computer program product for updating an electronic device security policy

• US 20070288989A1
• Filed: 06/09/2006
• Published: 12/13/2007
• Est. Priority Date: 06/09/2006
• Status: Abandoned Application

• Current Assignee: Nokia Solutions and Networks US LLC (Nokia Corporation)
• Original Assignee: Nokia Corporation
• Inventors: Aarnos, Jyrki, Pecsy, Gabor, Valimaki, Jari S.
• Application Number:
  US11/450,932
• Publication Number:
  US 20070288989A1
• Time in Patent Office: Days
• US Class Current: 726/1
• CPC Class Codes: G06F 21/53 by executing in a restricted environment, e.g. sandbox or secure virtual machine
• CPC Class Codes: G06F 21/604 Tools and structures for managing or administering access control systems
• CPC Class Codes: H04L 63/20 for managing network security; network security policies in general filtering policies H04L63/0227

Abstract

A convenient and safe way is provided to update the security policy associated with an electronic device after a user has purchased the device and taken it away for use. In particular, a scripting tool is provided that can be used to create a policy update script that describes the desired modifications to the electronic device security policy. An OSGi resource processor, referred to as a Policy Update Resource Processor, is further provided, wherein the Policy Update Resource Processor is located on the electronic device and is configured to carry out the security policy modifications outlined in the policy update script.

Claims

1. A method of updating a security policy associated with an electronic device, said method comprising:

receiving a policy update script comprising one or more modifications to the security policy; and

processing the policy update script using an OSGi policy update resource processor in order to effect the modifications to the security policy.

2. The method of claim 1, wherein the policy update script further comprises a signature corresponding with a transmitting party from whom the policy update script is received.

3. The method of claim 2 further comprising:

verifying the signature in order to determine whether the transmitting party is authorized to modify the security policy.

4. The method of claim 1 further comprising:

receiving a new software component associated with the policy update script; and

installing the new software component.

5. The method of claim 4, wherein the modifications to the security policy grant the new software component permission to access one or more existing software applications installed on the electronic device.

6. The method of claim 5, wherein the modifications further grant one or more existing software components permission to access the new software component.

7. An electronic device capable of updating a security policy associated with the electronic device, said electronic device comprising:

an OSGi policy update resource processor configured to receive a policy update script comprising one or more modifications to the security policy and to process the policy update script received in order to effect the modifications to the security policy.

8. The electronic device of claim 7, wherein the policy update script further comprises a signature corresponding with a transmitting party from whom the policy update script is received.

9. The electronic device of claim 8, wherein the resource processor is further configured to verify the signature in order to determine whether the transmitting party is authorized to modify the security policy.

10. The electronic device of claim 9, wherein the resource processor is further configured to determine, based at least in part on the signature, an extent to which the transmitting party is authorized to modify the security policy.

11. The electronic device of claim 7 further comprising:

a means to receive a new software component associated with the policy update script; and

a means to install the new software component on the electronic device.

12. The electronic device of claim 10, wherein the modifications to the security policy grant the new software component permission to access one or more existing software applications installed on the electronic device, and wherein the modifications further grant one or more existing software components permission to access the new software component.

13. An apparatus capable of updating a security policy associated with an electronic device, said apparatus comprising:

a processor; and

a memory in communication with the processor, said memory storing an application executable by the processor, wherein the application is configured, upon execution, to;

generate a policy update script comprising one or more modifications to the security policy, said policy update script capable of being processed by an OSGi policy update resource processor in order to effect the modifications; and

transmit the policy update script.

14. The apparatus of claim 13, wherein the application is further configured, upon execution, to associate a signature with the policy update script, said signature capable of being verified in order to determine whether a party associated with the apparatus is authorized to modify the security policy.

15. The apparatus of claim 13, wherein the application is further configured, upon execution, to combine the policy update script with a new software component to be installed on the electronic device, said application further configured, upon execution, to transmit the new software component to the electronic device with the policy update script.

16. The apparatus of claim 15, wherein the modifications to the security policy grant the new software component permission to access one or more existing software applications installed on the electronic device.

17. The apparatus of claim 16, wherein the modifications further grant one or more existing software components permission to access the new software component.

18. The apparatus of claim 15, wherein the application is further configured, upon execution, to generate the new software component.

19. A system for updating a security policy associated with an electronic device, said system comprising:

an apparatus configured to generate a policy update script comprising one or more modifications to the security policy, said apparatus further configured to transmit the policy update script; and

an electronic device configured to receive the policy update script, said electronic device comprising an OSGi policy update resource processor configured to process the policy update script received in order to effect the modifications to the security policy.

20. The system of claim 19, wherein the apparatus is further configured to associate a signature with the policy update script, such that transmitting the policy update script comprises transmitting the policy update script and the associated signature.

21. The system of claim 20, wherein the electronic device is further configured to verify the signature in order to determine whether a party associated with the apparatus is authorized to modify the security policy.

22. The system of claim 19, wherein the apparatus is further configured to combine the policy update script with a new software component and to transmit the new software component with the policy update script to the electronic device.

23. The system of claim 22, wherein the electronic device is further configured to receive the new software component and to install the software component.

24. The system of claim 23, wherein the modifications to the security policy grant the new software component permission to access one or more existing software applications installed on the electronic device.

25. The system of claim 24, wherein the modifications further grant one or more existing software components permission to access the new software component.

26. The system of claim 22, wherein the apparatus is further configured to generate the new software component.

27. A computer program product for updating a security policy associated with an electronic device, wherein the computer program product comprises at least one computer-readable storage medium having computer-readable program code portions stored therein, said computer-readable program code portions comprising:

a first executable portion for receiving a policy update script comprising one or more modifications to the security policy; and

a second executable portion for processing the policy update script using an OSGi policy update resource processor in order to effect the modifications to the security policy.

28. The computer program product of claim 27, wherein the policy update script further comprises a signature corresponding with a transmitting party from whom the policy update script is received.

29. The computer program product of claim 28, wherein the computer-readable program code portions further comprise:

a third executable portion for verifying the signature in order to determine whether the transmitting party is authorized to modify the security policy.

30. The computer program product of claim 27, wherein the computer-readable program code portions further comprise:

a third executable portion for receiving a new software component associated with the policy update script; and

a fourth executable portion for installing the new software component.

31. The computer program product of claim 30, wherein the modifications to the security policy grant the new software component permission to access one or more existing software applications installed on the electronic device.

32. The computer program product of claim 31, wherein the modifications further grant one or more existing software components permission to access the new software component.

33. An apparatus for updating a security policy associated with an electronic device, said apparatus comprising:

a means for receiving a policy update script comprising one or more modifications to the security policy; and

a means for processing the policy update script using an OSGi policy update resource processor in order to effect the modifications to the security policy.

34. The apparatus of claim 33, wherein the policy update script further comprises a signature corresponding with a transmitting party from whom the policy update script is received, said apparatus further comprising:

a means for verifying the signature in order to determine whether the transmitting party is authorized to modify the security policy.

35. The apparatus of claim 33 further comprising:

a means for receiving a new software component associated with the policy update script; and

a means for installing the new software component, wherein the modifications to the security policy grant the new software component permission to access one or more existing software applications installed on the electronic device and one or more existing software components permission to access the new software component.