Methods And Apparatus For Use In Obtaining A Digital Certificate For A Mobile Communication Device

• US 20090222657A1
• Filed: 02/29/2008
• Published: 09/03/2009
• Est. Priority Date: 02/29/2008
• Status: Active Grant

• Current Assignee: Malikie Innovations Limited (Key Patent Innovations Limited)
• Original Assignee: Research In Motion Limited (Blackberry Limited)
• Inventors: Adams, Neil Patrick, Bender, Christopher Lyle, Shih, Sam Cheng-Fu
• Granted Patent: US 9,479,339 B2
• Time in Patent Office: Days
• US Class Current: 713/156
• CPC Class Codes: H04L 2209/80 Wireless
• CPC Class Codes: H04L 63/0823 using certificates cryptographic mechanisms or cryptographic arrangements for entity authentication involving certificates H04L9/3263
• CPC Class Codes: H04L 67/303 Terminal profiles
• CPC Class Codes: H04L 67/55 Push-based network services
• CPC Class Codes: H04L 9/3265 using certificate chains, trees or paths; Hierarchical trust model
• CPC Class Codes: H04L 9/3268 using certificate validation, registration, distribution or revocation, e.g. certificate revocation list [CRL]
• CPC Class Codes: H04W 12/062 Pre-authentication
• CPC Class Codes: H04W 12/069 using certificates or pre-shared keys
• CPC Class Codes: H04W 4/12 Messaging; Mailboxes; Announcements
• CPC Class Codes: H04W 84/12 WLAN [Wireless Local Area Networks]

Abstract

In one illustrative scenario, a mobile device receives configuration information which includes information for use in constructing a request message for obtaining a digital certificate from a certificate authority (CA). After receipt of the configuration information, the mobile device constructs the request message for the digital certificate and causes it to be sent to a host server of a communication network. In response, the host server requests and obtains the digital certificate from the CA on behalf of the mobile device, and thereafter “pushes” the received digital certificate to the mobile device. The mobile device receives the digital certificate and stores it for use in subsequent communications. The host server may be part of a local area network (LAN) which includes a wireless LAN (WLAN) adapted to authenticate the mobile device based on the digital certificate, so that the mobile device may obtain access to the WLAN.

Claims

1. A method in a mobile communication device for use in obtaining a digital certificate, the method comprising the acts of:

causing a request message for a digital certificate to be sent to a host server for instructing the host server to obtain the digital certificate from a certificate authority (CA) on behalf of the mobile communication device;

receiving, via the host server, the digital certificate in response to the request message; and

storing the digital certificate for use in communications involving the mobile communication device.

2. The method of claim 1, wherein the digital certificate is for use in authenticating the mobile communication device for communication access in a wireless communication network.

3. The method of claim 1, comprising the further act of:

receiving, via a user interface of the mobile communication device, information for use in constructing the request message for the digital certificate.

4. The method of claim 1, wherein the digital certificate is for use in encryption and decryption of e-mail communications of the mobile communication device.

5. The method of claim 1, comprising the further act of:

prior to sending the request message, receiving configuration information from the host server, the configuration information comprising information for use in constructing the request message for obtaining the digital certificate from the CA.

6. The method of claim 1, comprising the further act of:

receiving, from the host server, one or more status messages which indicate a status of the request for the digital certificate.

7. The method of claim 1, comprising the further act of:

generating a private key associated with the digital certificate; and

wherein the request message comprises a message signed with the private key associated with the digital certificate.

8. The method of claim 1, wherein the request message comprises a Public Key Cryptography Standard (PKCS) message.

9. The method of claim 1, wherein the host server is part of a local area network (LAN) which includes a wireless LAN (WLAN).

10. A mobile communication device, comprising:

a wireless transceiver;

one of more processors coupled to the wireless transceiver;

the one or more processors being adapted to obtain a digital certificate by being operative to;

cause a request message for a digital certificate to be sent to the host server, to thereby allow the host server to obtain the digital certificate from a certificate authority (CA) on behalf of the mobile communication device;

receive, from the host server, the digital certificate in response to the request message; and

store, in memory, the digital certificate for use in communications involving the mobile communication device.

11. The mobile communication device of claim 10, wherein the digital certificate is for use in authenticating the mobile communication device for communication access in a wireless communication network.

12. The mobile communication device of claim 10, wherein the one or more processors are further operative to:

receive, via the wireless transceiver, configuration information from the host server prior to sending the request message, the configuration information comprising information for use in constructing the request message for obtaining the digital certificate from the CA.

13. The mobile communication device of claim 10, wherein the one or more processors are further operative to:

receiving, from the host server, one or more status messages which indicate a status of the request for the digital certificate.

14. The mobile communication device of claim 10, wherein the request message comprises a Public Key Cryptography Standard (PKCS) message.

15. A method in a host server for use in obtaining a digital certificate for a mobile communication device, the method comprising the acts of:

receiving a request message for a digital certificate;

in response to receiving the request message;

communicating with a certificate authority (CA) for requesting and receiving the digital certificate on behalf of the mobile communication device; and

causing the digital certificate to be sent to the mobile communication device.

16. The method of claim 15, comprising the further act of:

causing configuration information to be sent to the mobile communication device in the communication session, the configuration information comprising information for use by the mobile communication device for constructing the request message for the digital certificate.

17. The method of claim 15, comprising the further act of:

receiving the digital certificate from the CA in an e-mail message.

18. The method of claim 15, comprising the further act of:

regularly polling the CA for the digital certificate.

19. The method of claim 15, wherein the request message comprises a message signed with a private key associated with the digital certificate and generated at the mobile communication device.

20. The method of claim 15, wherein the request message comprises a Public Key Cryptography Standard (PKCS) message.

21. The method of claim 15, wherein the host server is part of a local area network (LAN) which includes a wireless LAN (WLAN) adapted to authenticate the mobile communication device based on the digital certificate.

22. The method of claim 15, wherein the host server is part of a local area network (LAN) which includes a wireless LAN (WLAN) adapted to authenticate the mobile communication device based on the digital certificate, and the communication session is established over (1) a radio link between the mobile communication device and a cellular telecommunications network, or (2) a wired connection between the mobile communication device and a computer connected in the LAN.

23. The method of claim 15, comprising the further act of:

causing one or more status messages to be sent to the mobile communication device which indicate the status of the request for the digital certificate.

24. A host server adapted to obtain a digital certificate for a mobile communication device by being operative to receive a request message for a digital certificate from the mobile communication device;

in response to receiving the request message;

establish a connection and communicate with a certificate authority (CA) for requesting and receiving the digital certificate on behalf of the mobile communication device; and

cause the digital certificate to be sent to the mobile communication device.

25. The host server of claim 24, which is further operative to cause configuration information to be sent to the mobile communication device in the communication session, the configuration information comprising information for use by the mobile communication device for constructing the request message for the digital certificate.

26. The host server of claim 24, wherein the digital certificate is received by the host server in an e-mail message or by regularly polling the CA.

27. The host server of claim 24, comprising the further act of:

causing one or more status messages to be sent to the mobile communication device which indicate the status of the request for the digital certificate.

28. The host server of claim 24, wherein the request message comprises a Public Key Cryptography Standard (PKCS) message.

29. The host server of claim 24, wherein the host server is part of a local area network (LAN) which includes a wireless LAN (WLAN) adapted to authenticate the mobile communication device based on the digital certificate.

30. The host server of claim 24, which is adapted to connect and be part of a computer network and communicate with the CA which is connected outside of the computer network.

31. A communication system, comprising:

a host server for connection in a communication network;

a mobile communication device;

the mobile communication device being adapted to;

cause a request message for a digital certificate to be sent to the host server;

receive, from the host server, the digital certificate in response to the request message; and

store, in memory, the digital certificate for use in communications involving the mobile communication device;

the host server being adapted to;

receive the request message for the digital certificate from the mobile communication device;

in response to receiving the request message;

cause a connection to be established between the host server and a certificate authority (CA) which is connected outside of the communication network, for requesting and receiving the digital certificate on behalf of the mobile communication device; and

cause the digital certificate to be sent to the mobile communication device