Certificate Management and Transfer System and Method

• US 20090292916A1
• Filed: 06/09/2009
• Published: 11/26/2009
• Est. Priority Date: 06/12/2001
• Status: Active Grant

• Current Assignee: Malikie Innovations Limited (Key Patent Innovations Limited)
• Original Assignee: Blackberry Limited
• Inventors: Adams, Neil P., Brown, Michael S., Kirkup, Michael G., Godfrey, James A., Little, Herbert A., Tapuska, David F.
• Granted Patent: US 8,015,400 B2
• Time in Patent Office: Days
• US Class Current: 713/156
• CPC Class Codes: G06Q 10/107 Computer-aided management of electronic mailing [e-mailing]
• CPC Class Codes: H04L 12/189 in combination with wireless systems selective distribution or broadcast in wireless communication networks H04W4/06
• CPC Class Codes: H04L 51/00 User-to-user messaging in packet-switching networks, transmitted according to store-and-forward or real-time protocols, e.g. e-mail
• CPC Class Codes: H04L 51/58 Message adaptation for wireless communication
• CPC Class Codes: H04L 63/0272 Virtual private networks
• CPC Class Codes: H04L 63/0442 wherein the sending and receiving network entities apply asymmetric encryption, i.e. different keys for encryption and decryption cryptographic mechanisms or cryptographic arrangements for public-key encryption H04L9/30
• CPC Class Codes: H04L 63/045 wherein the sending and receiving network entities apply hybrid encryption, i.e. combination of symmetric and asymmetric encryption cryptographic mechanisms or cryptographic arrangements using a plurality of keys or algorithms H04L9/14
• CPC Class Codes: H04L 63/062 for key distribution, e.g. centrally by trusted party cryptographic mechanisms or cryptographic arrangements for key distribution involving a central third party H04L9/0819
• CPC Class Codes: H04L 63/0823 using certificates cryptographic mechanisms or cryptographic arrangements for entity authentication involving certificates H04L9/3263
• CPC Class Codes: H04L 63/101 Access control lists [ACL]
• CPC Class Codes: H04L 63/126 the source of the received data
• CPC Class Codes: H04L 67/04 specially adapted for terminals or networks with limited capabilities; specially adapted for terminal portability
• CPC Class Codes: H04W 12/033 of the user plane, e.g. user's traffic
• CPC Class Codes: H04W 12/041 Key generation or derivation
• CPC Class Codes: H04W 12/0471 Key exchange
• CPC Class Codes: H04W 12/106 Packet or message integrity
• CPC Class Codes: H04W 92/18 between terminal devices

Abstract

A method and system for Certificate management and transfer between messaging clients are disclosed. When communications are established between a first messaging client and a second messaging client, one or more Certificates stored on the first messaging client may be selected and transferred to the second messaging client. Messaging clients may thereby share Certificates. Certificate management functions such as Certificate deletions, Certificate updates and Certificate status checks may also be provided.

Claims

1. A method of Certificate (Cert) management and transfer between a computer system having a first data transfer interface and a wireless communication device enabled for communications in a wireless communication network and having a second data transfer interface compatible with the first data transfer interface, the method comprising:

establishing communications between the computer system and the wireless communication device via the first data transfer interface and the second data transfer interface;

receiving user input to select one or more Certs stored at one of the computer system and the wireless communication device for transfer to the other of the computer system and the wireless communication device; and

transferring the selected one or more Certs from the one of the computer system and the wireless communication device to the other of the computer system and the wireless communication device,

wherein the transferred one or more Certs are used to handle messages communicated via the wireless communication network that are received from or to be transmitted to one or more remote entities whose communications are associated with the transferred one or more Certs.

2. The method of claim 1, wherein:

establishing communications between the computer system and the wireless communication device comprises establishing a communications link between the first data transfer interface and the second data transfer interface; and

the communications link is selected from the group consisting of;

a physical communications link and a wireless communications link.

3. The method of claim 1, further comprising:

generating a list of Certs stored at the one of the computer system and the wireless communication device; and

displaying the generated list of Certs,

wherein the user input comprises a selection of the one or more Certs from the displayed list.

4. The method of claim 3, wherein:

the displaying comprises displaying the generated list on the one of the computer system and the wireless communication device; and

the selection of the one or more Certs from the displayed list is made via a user interface associated with the one of the computer system and the wireless communication device.

5. The method of claim 3, wherein:

the displaying comprises displaying the generated list on the other of the computer system and the wireless communication device; and

the selection of the one or more Certs from the displayed list is made via a user interface associated with the other of the computer system and the wireless communication device.

6. The method of claim 3, wherein generating the list of Certs comprises:

identifying Certs that are stored at the one of the computer system and the wireless communication device;

identifying Certs that are stored at the other of the computer system and the wireless communication device; and

generating a list of Certs that are stored only at the one of the computer system and the wireless communication device and not at the other of the computer system and the wireless communication device.

7. The method of claim 1, further comprising storing the selected one or more Certs in a data store on the other of the computer system and the wireless communication device.

8. The method of claim 1, further comprising:

receiving user input to select one or more Certs stored at the other of the computer system and the wireless communication device for transfer to the one of the computer system and the wireless communication device; and

transferring the selected one or more Certs stored at the other of the computer system and the wireless communication device from the other of the computer system and the wireless communication device to the one of the computer system and the wireless communication device.

9. The method of claim 8, further comprising:

generating a list of Certs stored at the one of the computer system and the wireless communication device;

displaying the generated list of Certs on the one of the computer system and the wireless communication device;

generating a list of Certs stored at the other of the computer system and the wireless communication device; and

displaying the generated list of Certs on the one of the computer system and the wireless communication device,

wherein the user input to select the one or more Certs stored at the one of the computer system and the wireless communication device comprises a selection from the list of Certs stored at the one of the computer system and the wireless communication device and made via a user interface associated with the one of the computer system and the wireless communication device, and

wherein the user input to select the one or more Certs stored at the other of the computer system and the wireless communication device comprises a selection from the list of Certs stored at the other of the computer system and the wireless communication device and made via a user interface associated with the one of the computer system and the wireless communication device.

10. The method of claim 1, further comprising:

generating a list of Certs stored in a data store at the other of the computer system and the wireless communication device;

displaying the generated list of Certs on the one of the computer system and the wireless communication device;

receiving user input to select for deletion from the data store one or more Certs from the displayed list via a user interface associated with the one of the computer system and the wireless communication device; and

deleting the selected one or more Certs from the data store on the other of the computer system and the wireless communication device.

11. The method of claim 1, wherein the computer system is selected from the group consisting of:

a desktop computer system, a laptop computer system, and a wireless mobile communication device.

12. The method of claim 1, wherein the one or more Certs associated with the one or more remote entities are available from a third-party certificate authority.

13. A system for Certificate (Cert) management and transfer between a computer system and a wireless communication device, the system comprising:

at the computer system;

a first memory comprising a first Cert store configured to store Certs;

a first Cert synchronization (sync) system configured to access the first Cert store; and

a first communications interface; and

at the wireless communication device;

a second memory comprising a second Cert store configured to store Certs;

a second Cert sync system configured to access the second Cert store;

a wireless transceiver that enables the wireless communication device for communications in a wireless communication network; and

a second communications interface compatible with the first communications interface,

wherein the first Cert sync system is further configured to transfer Certs stored in the first Cert store from the computer system to the wireless communication device when a communications link is established between the computer system and the wireless communication device via the first communications interface and the second communications interfaces, and

wherein the transferred Certs are used to handle messages communicated via the wireless communication network that are received from or to be transmitted to remote entities whose communications are associated with the transferred Certs.

14. The system of claim 13, wherein the second Cert sync system is further configured to store Certs transferred from the computer system to the wireless communication device to the second Cert store.

15. The system of claim 14, further comprising a user interface at the computer system, the user interface being configured to accept user inputs to select one or more of the Certs stored in the first Cert store, wherein the selected Certs are transferred from the computer system to the wireless communication device.

16. The system of claim 15, wherein the second Cert sync system is further configured to transfer Certs stored in the second Cert store from the wireless communication device to the computer system when the communications link is established between the computer system and the wireless communication device via the first communications interface and the second communications interface.

17. The system of claim 14, wherein the user interface at the computer system is further configured to accept user inputs to select one or more of the Certs stored in the second Cert store, wherein the selected one or more Certs are transferred from the wireless communication device to the computer system.

18. The system of claim 13, wherein the first Cert sync system is further configured to check the status of each Cert stored in the second Cert store to detect expired, invalid or revoked Certs stored in the second Cert store.

19. The system of claim 13, wherein the computer system is selected from the group consisting of:

a desktop computer system, a laptop computer system, and a wireless mobile communication device.

20. The system of claim 13, wherein the wireless communication device is selected from the group consisting of:

a data communication device, a voice communication device, a dual-mode communication device having both data and voice communications functionality, a cellular telephone having data communications functionality, a personal digital assistant (PDA) enabled for wireless communications, and a laptop or desktop computer system with a wireless modem.

21. The system of claim 13, further comprising:

at the computer system;

a first messaging system; and

a first communications subsystem; and

at the wireless communication device;

a second messaging system; and

a second communications subsystem,

wherein the first messaging system is configured to store Certs received via the first communications subsystem to the first Cert store and the second messaging system is configured to store Certs received via the second communications subsystem to the second Cert store.

22. The system of claim 13, wherein the first communications interface and the second communications interface establish a physical link between the computer system and the wireless communication device.

23. The system of claim 22, wherein the first communications interface and the second communications interface are selected from the group consisting of:

serial ports and Universal Serial Bus (USB) ports.

24. The system of claim 13, wherein the first communications interface and the second communications interface establish a wireless link between the computer system and the wireless communication device.

25. The system of claim 22, wherein the first communications interface and the second communications interface are selected from the group consisting of:

Infrared Data Association (IrDA) ports, Bluetooth modules and 802.11 modules.

26. A system for transferring Certificates (Certs) between a computer system and a wireless mobile communication device, the system comprising:

a serial port associated with the computer system;

a mobile device connector connected to the serial port, the mobile device connector having an interface; and

a mobile device interface associated with the wireless mobile communication device and compatible with the interface of the mobile device connector,

wherein Certs stored at the computer system are transferred to the wireless mobile communication device when a communications link is established between the computer system and the wireless mobile communication device by placing the wireless mobile communication device in the mobile device connector, and

wherein the transferred Certs are used to handle messages communicated via the wireless communication network that are received from or to be transmitted to remote entities whose communications are associated with the transferred Certs.

27. A wireless mobile communication device comprising:

a wireless transceiver;

a messaging system coupled to the wireless transceiver;

a communications interface for exchanging data with a computer system;

a Cert store configured to store Certificates (Certs); and

a Cert synchronization (sync) system coupled to the Cert store and the communications interface,

wherein the messaging system is configured to store Certs received via the wireless transceiver to the Cert store, and the Cert sync system is configured to store Certs received from the computer system via the communications interface to the Cert store, and

wherein the stored Certs are used to handle messages communicated via the wireless communication network that are received from or to be transmitted to remote entities whose communications are associated with the stored Certs.

28. The wireless mobile communication device of claim 27, wherein the messaging system is further configured to request Certs from a Public Key Server (PKS).

29. The wireless mobile communication device of claim 27, wherein the communications interface is selected from the group consisting of:

a serial port, a Universal Serial Bus (USB) port, and Infrared Data Association (IrDA) port, a Bluetooth module and an 802.11 module.

30. The wireless mobile communication device of claim 27, wherein the wireless mobile communication device is selected from the group consisting of:

a data communication device, a voice communication device, a dual-mode communication device having both data and voice communications functionality, a cellular telephone having data communications functionality, a personal digital assistant (PDA) enabled for wireless communications, and a laptop or desktop computer system with a wireless modem.