SYSTEM AND METHOD FOR MANAGING APPLICATION PROGRAM ACCESS TO A PROTECTED RESOURCE RESIDING ON A MOBILE DEVICE

• US 20100242097A1
• Filed: 03/19/2010
• Published: 09/23/2010
• Est. Priority Date: 03/20/2009
• Status: Abandoned Application

• Current Assignee: Wavemarket Incorporated (Gen Digital Inc.)
• Original Assignee: Wavemarket Incorporated (Gen Digital Inc.)
• Inventors: Blackston, David, Roumeliotis, Tasos, Hotes, Scott
• Application Number:
  US12/728,174
• Publication Number:
  US 20100242097A1
• Time in Patent Office: Days
• US Class Current: 726/4
• CPC Class Codes: G06F 21/31 User authentication
• CPC Class Codes: G06F 21/6218 to a system of files or objects, e.g. local or distributed file system or database
• CPC Class Codes: G06F 21/6245 Protecting personal data, e.g. for financial or medical purposes
• CPC Class Codes: G06F 2221/2115 Third party
• CPC Class Codes: G06F 9/468 Specific access rights for resources, e.g. using capability register
• CPC Class Codes: H04L 9/3213 using tickets or tokens, e.g. Kerberos network architectures or network communication protocols for entities authentication using tickets in a packet data network H04L63/0807
• CPC Class Codes: H04L 9/3271 using challenge-response
• CPC Class Codes: H04W 12/082 using revocation of authorisation
• CPC Class Codes: H04W 12/084 using delegated authorisation, e.g. open authorisation [OAuth] protocol

Abstract

A computer-implemented method for managing application program access to a protected resource residing on a mobile device is provided. The method includes receiving from an application program a request for a permission to access the protected resource, and receiving from a source external to the mobile device an authentication of the application program. An authorization to provide the permission to access the protected resource is received and permission to access the protected resource is provided to the application program in response to receiving the authorization. Data produced by the protected resource is cryptographically signed, and a notification is generated in response to at least one of the application program requesting the permission to access the protected resource and the application program accessing the protected resource. A system for managing application program access to a protected resource residing on a mobile device is further provided.

Claims

1. A computer-implemented method for managing application program access to a protected resource residing on a mobile device, the method comprising:

receiving from an application program a request for a permission to access the protected resource;

receiving from a source external to the mobile device an authentication of the application program;

receiving an authorization to provide the permission to access the protected resource; and

providing the permission to access the protected resource to the application program in response to receiving the authorization.

2. The method of claim 1, wherein receiving the authorization comprises receiving a cryptographically secure access token via an API.

3. The method of claim 1, wherein receiving the authorization comprises receiving a password and receiving a cryptographically secure access token via an API after receiving the password.

4. The method of claim 1, wherein receiving the request for the permission to access the protected resource comprises receiving a request for a permission to access a resource for producing location data.

5. The method of claim 1, wherein receiving the request for the permission to access the protected resource comprises receiving a request for a permission to access at least one of a dedicated GPS location determining chipset and a multi-function chipset enabled for GPS location determination.

6. The method of claim 1, wherein receiving the request for the permission to access the protected resource comprises receiving a request for a permission to access at least one of contents of an address book of the mobile device, contents of a contact list of the mobile device, and contents of an SMS inbox of the mobile device.

7. The method of claim 1, wherein receiving the authentication from the source external to the mobile device comprises receiving a cryptographically secure request token via an API.

8. The method of claim 1, further comprising:

cryptographically signing data produced by the protected resource; and

generating a notification in response to at least one of the application program requesting the permission to access the protected resource and the application program accessing the protected resource.

9. The method of claim 8, further comprising transmitting the notification in the form of at least one of an SMS, an MMS, and an electronic mail.

10. The method of claim 8, further comprising transmitting the notification in the form of an addition to a cryptographically secure log file stored on the mobile device.

11. The method of claim 8, further comprising providing the device with a cryptographically secure key store, wherein cryptographically signing data produced by the protected resource comprises accessing the cryptographically secure key store.

12. The method of claim 8, further comprising providing the device with a device-unique cryptographically secure key store, wherein cryptographically signing data produced by the protected resource comprises accessing the device-unique cryptographically secure key store.

13. The method of claim 1, wherein receiving the authorization comprises receiving a password.

14. The method of claim 1, wherein receiving the authorization comprises receiving a cryptographically secure digitally signed request, and wherein the method further comprises verifying the cryptographically secure digitally signed request.

15. A computer-implemented method for managing application program access to a protected resource residing on a mobile device, the method comprising:

providing the mobile device with a module separating an application program interface (API) layer for enabling an application program from a protected resource layer, comprising the protected resource, on the mobile device;

providing a remote server remote to the mobile device configured for connection to the mobile device via a network;

receiving with the secure resource module from the application program via the API layer a request for a permission to access the protected resource;

transmitting an authentication with the remote server to the mobile device;

receiving from the remote server with the module the authentication of the application program;

receiving from at least one of the remote server and a user with the module an authorization to provide the permission for the application program to access the protected resource; and

providing with the module to the application program the permission to access the protected resource in response to receiving the authorization.

16. The method of claim 15, further comprising:

cryptographically signing with the module data produced by the protected resource; and

generating with the module a notification in response to at least one of the application program requesting the permission to access the protected resource and the application program accessing the protected resource.

17. A system for managing application program access to a protected resource residing on a mobile device comprising at least one computing device including at least one memory comprising instructions operable to enable the computing device to perform a procedure comprising:

receiving from an application program a request for a permission to access the protected resource;

receiving from a source external to the mobile device an authentication of the application program;

receiving an authorization to provide the permission to access the protected resource; and

providing the permission to access the protected resource in response to receiving the authorization.

18. The system of claim 17, wherein the at least one memory further comprises instructions operable to enable the computing device to perform a procedure comprising:

cryptographically signing data produced by the protected resource; and

generating a notification in response to the application program accessing the protected resource.

19. Computer-readable media tangibly embodying a program of instructions executable by a computing device to implement a method, the computing device being capable of interfacing with a communications network, the method comprising:

receiving from an application program a request for a permission to access the protected resource;

receiving from a source external to the mobile device an authentication of the application program;

receiving an authorization to provide the permission to access the protected resource; and

providing the permission to access the protected resource in response to receiving the authorization.

20. The computer-readable media of claim 19, embodying the program of instructions executable by a computing device to implement the method further comprising:

cryptographically signing data produced by the protected resource; and

generating a notification in response to the application program accessing the protected resource.