SYSTEM AND METHOD TO SECURELY LOAD A MANAGEMENT CLIENT FROM A STUB CLIENT TO FACILITATE REMOTE DEVICE MANAGEMENT

• US 20090199176A1
• Filed: 02/06/2008
• Published: 08/06/2009
• Est. Priority Date: 02/06/2008
• Status: Active Grant

• Current Assignee: Alcatel-Lucent SA (Nokia Corporation)
• Original Assignee: Mformation Software Technologies Incorporated (Nokia Corporation)
• Inventors: Shah, Amit, Devarakonda, Srinivas, Kushwaha, Rakesh, Nath, Badri
• Granted Patent: US 8,413,138 B2
• Time in Patent Office: Days
• US Class Current: 717/178
• CPC Class Codes: G06F 8/61 Installation
• CPC Class Codes: H04L 41/0803 Configuration setting
• CPC Class Codes: H04L 67/34 involving the movement of software or configuration parameters network booting or remote initial program loading [RIPL] G06F9/4416

Abstract

Systems and methods are described for securely downloading management client software onto a device from an embedded stub in the device. In one embodiment, the stub client is activated by a message with credentials from a management server. The stub client, after verification of the credentials, downloads and activates a full management client. The management client then participates in any authorized management session with the device management server. The messages are preferably encrypted using a key that is based on the credentials. The credentials may be specific to the device and to the service provider associated with the device.

Claims

1. A method of downloading an application onto a remotely managed device comprising:

receiving an activate message with credentials from a device management server, verifying the activate message;

connecting to a download server; and

downloading the application from the download server.

2. The method of claim 1, wherein the method is carried out by a stub application.

3. The method of claim 1, wherein the application is a device management client application.

4. The method of claim 2, wherein the stub application downloads the application without user interaction.

5. The method of claim 2, wherein the stub application is dormant and is activated when an activate message is received at the remotely managed device.

6. The method of claim 1, wherein the activate message includes a location of the download server.

7. The method of claim 1, wherein the credentials include service provider specific information so that a service provider specific application is downloaded.

8. The method of claim 1, wherein the credentials include device specific information so that a device specific application is downloaded.

9. The method of claim 8, wherein the device specific information includes an identifier uniquely associated with the device.

10. The method of claim 1 comprising determining whether a device management application is on the device before downloading the application.

11. The method of claim 2, wherein the stub application is embedded in at least one of the device, a SIM card, and a removable smart card.

12. The method of claim 1, wherein the activate message is encrypted using the credentials and the step of verifying the activate message includes decrypting the activate message using a key based on the credentials.

13. The method of claim 1 comprising:

constructing the activate message;

encrypting the activate message using a key based on the credentials; and

sending the encrypted activate message to the device.

14. The method of claim 13, wherein the message is sent using a short messaging service (SMS).