METHOD AND SYSTEM FOR MANAGING A SOFTWARE APPLICATION ON A MOBILE COMPUTING DEVICE

• US 20100313019A1
• Filed: 12/10/2008
• Published: 12/09/2010
• Est. Priority Date: 12/10/2007
• Status: Abandoned Application

• Current Assignee: Fireid
• Original Assignee: Fireid
• Inventors: Joubert, Francois Malan
• Application Number:
  US12/745,875
• Publication Number:
  US 20100313019A1
• Time in Patent Office: Days
• US Class Current: 713/168
• CPC Class Codes: G06F 21/313 using a call-back technique via a telephone network
• CPC Class Codes: G06F 21/34 involving the use of external additional devices, e.g. dongles or smart cards
• CPC Class Codes: H04L 63/0838 using one-time-passwords

Abstract

A method of and system for managing a one time password security software application employed on a mobile computing device (12) are provided. The method comprises generating a command message comprising command data specifying a type of command to be performed on the one time password security application employed on the mobile computing device, and a unique identification code to identify a data record on which the command is to be performed or to identify a one time password algorithm and its associated authentication entity on which the command is to be performed. This message is transmitted by a turn key server (18) to the mobile computing device (12) for execution on the mobile computing device thereby to manage the one time password security software application.

Claims

1. A method of managing a one time password security software application employed on a mobile computing device, the method comprising:

generating a command message comprising

command data specifying a type of command to be performed on the one time password security application employed on the mobile computing device, and

a unique identification code to identify a data record on which the command is to be performed or to identify a one time password algorithm and its associated authentication entity on which the command is to be performed; and

transmitting the command message to the mobile computing device for execution on the mobile computing device thereby to manage the one time password security software application.

2. The method of claim 1 wherein the mobile computing device is a mobile telephone, a Personal Digital Assistant (PDA) or another mobile computing device with wireless connectivity.

3. The method of claim 1 wherein the type of command specified by the command message is a command to update or add data associated with the authentication entity, a command to remove the authentication entity, a command to perform a synchronisation operation for the authentication entity, or commands to either add, update or delete general data records associated with the one time password security application.

4. The method of claim 1 wherein the method further comprises encrypting the command message prior to transmission.

5. The method of claim 4 wherein the encryption is symmetric or asymmetric encryption.

6. The method of claim 1 wherein the command message is transmitted from a turnkey server associated with the authentication entity identified through the unique identification code.

7. The method of claim 6 wherein a trust relationship exists between the mobile computing device and the authentication entity prior to the transmittal of the command message.

8. The method of claim 7 wherein the trust relationship between the mobile computing device and the authentication entity has been established during the installation of the one time password security application on the mobile computing device.

9. The method of claim 1 wherein the method further comprises, if a trust relationship does not exist between the authentication entity associated with the command message and the mobile computing device, transmitting the command message from a turnkey server associated with a trusted authentication entity that is not associated with the command message.

10. The method of claim 9 wherein the method comprises first transmitting the command message from a turnkey server not in a trust relationship with the mobile computing device, to a turnkey server in a trust relationship with the mobile computing device.

11. The method of claim 10 wherein the command message includes a security key associated with the turnkey server not in a trust relationship with the mobile computing device.

12. The method of claim 4 wherein the step of encrypting the command message includes transmitting a security key to the user of the mobile computing device over a second communication channel.

13. The method of claim 12 wherein the security key is a PIN.

14. The method of claim 4 wherein the step of encrypting the command message further includes encrypting the command message with an existing shared security key which was transmitted to the mobile commuting device during the installation process of the one time password security software application.

15. The method of claim 1 wherein the method further comprises receiving, at the mobile computing device, the command message and executing the command message thereby to manage the one time password security software application.

16. The method of claim 15 wherein the step of executing the command message comprises decrypting the command message.

17. A system to manage a one time password security software application employed on a mobile computing device, the system comprising:

a secure server of an authentication entity associated with a network, the network to be accessed by the mobile computing device through the use of a one time password;

the system being operable to;

generate a command message comprising

command data specifying a type of command to be performed on the one time password security application employed on the mobile computing device; and

a unique identification code to identify a data record on which the command is to be performed or to identify a one time password algorithm and its associated authentication entity on which the command is to be performed; and

transmit the command message to the mobile computing device for execution on the mobile computing device thereby to manage the one time password security software application.

18. The system of claim 17 wherein the secure server is configured to establish, during a registration process, a trust relationship with the authentication entity.

19. The system of claim 18 wherein the secure server is further configured to generate the command message by first receiving from a second server of a second authentication entity associated with a second network the command message.