Mobile terminal, resource access control system for mobile terminal, and resource access control method in mobile terminal

• US 20090205037A1
• Filed: 06/24/2005
• Published: 08/13/2009
• Est. Priority Date: 06/25/2004
• Status: Abandoned Application

• Current Assignee: NEC Corporation
• Original Assignee: NEC Corporation
• Inventors: Asakura, Yoshiharu
• Application Number:
  US11/630,660
• Publication Number:
  US 20090205037A1
• Time in Patent Office: Days
• US Class Current: 726/10
• CPC Class Codes: G06F 21/629 to features or functions of an application
• CPC Class Codes: G06F 9/468 Specific access rights for resources, e.g. using capability register

Abstract

The present invention provides a mobile terminal, a resource access control system for a mobile terminal, and a resource access control method in a mobile terminal which can flexibly change resources that can be accessed by an application. An application manager 118 of a mobile terminal 101 transmits an identifier of a root certificate of an application to a server 102 at predetermined timing, e.g., when the application is started, to thereby retrieve a corresponding resource list from a resource database 122. The corresponding resource list is added to an access database 115, or the contents of the access database 115 are updated with the corresponding resource list. Access to resources specified by the resource list is permitted. When the resource list is changed, the contents of the resource list may be transmitted from the server 102 to the mobile terminal 101 by a push type notification.

Claims

1. A mobile terminal characterized by comprising:

application storage means for storing application software programs to be used;

resource list request means for requesting a resource list including resources that can be accessed by an application software program stored in the application storage means to an external device based on information indicative of a root certificate used to verify a certificate attached to the application software program at predetermined timing of use of the application software program; and

resource access control means for determining a resource that can be accessed by the application software program with use of the resource list acquired by the request of the resource list request means.

2. A mobile terminal characterized by comprising:

application storage means for storing application software programs to be used;

resource list acquisition means for transmitting an identifier of a root certificate used to verify a certificate attached to an application software program stored in the application storage means to a predetermined server at predetermined timing of use of the application software program and acquiring a resource list including resources that can be accessed by the application software program with use of a key of the identifier of the root certificate; and

resource access control means for determining a resource that can be accessed by the application software program with use of the resource list acquired by the resource list acquisition means.

3. The mobile terminal as recited in claim 2, characterized by further comprising an access database for storing resource lists corresponding to the respective application software programs;

and access database update means for adding the resource list acquired from the server to the access database if the resource list acquired from the server has not been stored in the access database and for updating a corresponding resource list in the access database if the resource list acquired from the server has been stored in the access database.

4. A resource access control system for a mobile terminal, characterized by comprising:

a mobile terminal including application storage means for storing application software programs to be used, resource list request means for requesting a resource list including resources that can be accessed by an application software program stored in the application storage means to an external device based on an identifier of a root certificate used to verify a certificate attached to the application software program at predetermined timing of use of the application software program, and resource access control means for determining a resource that can be accessed by the application software program with use of the resource list acquired by the request of the resource list request means; and

a server including a resource database for storing resource lists including resources that can be accessed by various application software programs in association with an identifier of a root certificate, resource database retrieval means for performing retrieval from the resource database when the resource list request means of the mobile terminal requests a resource list with a specified identifier of a root certificate, and resource list transmission means for transmitting the resource list acquired by the retrieval of the resource database retrieval means to the requesting mobile terminal.

5. A resource access control method in a mobile terminal, characterized by comprising:

a resource list acquisition request step of transmitting an identifier of a root certificate used to verify a certificate attached to an application software program to a server at predetermined timing of use of the application software program in a mobile terminal and requesting acquisition of a resource list including resources that can be accessed by the application software program;

a retrieval result transmission step of retrieving a resource list from a resource database storing resource lists including resources that can be accessed by various application software programs in association with the respective application software programs with use of a key of the identifier of the root certificate transmitted in the resource list acquisition request step and transmitting the resource list from the server to the requesting mobile terminal; and

a resource access control step of determining a resource that can be accessed by the application software program with use of the resource list transmitted from the server to the mobile terminal in the retrieval result transmission step.

6. A mobile terminal characterized by comprising:

application storage means for storing application software programs to be used;

a database for storing pairs of an identifier of a root certificate used to verify a certificate attached to an application software program stored in the application storage means and a resource list including resources that can be accessed by the application software program in association with each other;

receiving means for receiving a pair of an identifier of a root certificate transmitted from an external device and a resource list including resources that can be accessed by an application software program;

database update means for updating the database when the identifier received by the receiving means is an identifier of a root certificate used to verify a certificate attached to the application software program stored in the application storage means;

retrieval means for retrieving a resource list corresponding to an identifier of a root certificate used to verify a certificate attached to an application software program from the database when the application software program is started; and

resource access control means for determining a resource that can be accessed by the application software program with use of the resource list retrieved by the retrieval means.

7. A resource access control system for a mobile terminal, characterized by comprising:

a server including a database for storing pairs of an identifier of a root certificate and a resource list including resources that can be accessed by an application software program in association with each other, and resource list change transmission means for transmitting a resource list to a predetermined destination together with the identifier of the root certificate when the resource list is changed; and

a mobile terminal including application storage means for storing application software programs to be used, a database for storing pairs of an identifier of a root certificate used to verify a certificate attached to an application software program stored in the application storage means and a resource list including resources that can be accessed by the application software program in association with each other, receiving means for receiving a pair of an identifier of a root certificate transmitted from the server and a resource list including resources that can be accessed by an application software program, database update means for updating the database when the identifier received by the receiving means is an identifier of a root certificate used to verify a certificate attached to the application software program stored in the application storage means, retrieval means for retrieving a resource list corresponding to an identifier of a root certificate used to verify a certificate attached to an application software program from the database when the application software program is started, and resource access control means for determining a resource that can be accessed by the application software program with use of the resource list retrieved by the retrieval means.