System and Method of Owner Control of Electronic Devices

• US 20100325741A1
• Filed: 08/26/2010
• Published: 12/23/2010
• Est. Priority Date: 12/12/2002
• Status: Active Grant

• Current Assignee: Malikie Innovations Limited (Key Patent Innovations Limited)
• Original Assignee: Blackberry Limited
• Inventors: Clark, David R., Little, Herbert A.
• Granted Patent: US 8,302,185 B2
• Time in Patent Office: Days
• US Class Current: 726/34
• CPC Class Codes: G06F 21/30 Authentication, i.e. establishing the identity or authorisation of security principals
• CPC Class Codes: G06F 21/62 Protecting access to data via a platform, e.g. using keys or access control rules
• CPC Class Codes: G06F 21/64 Protecting data integrity, e.g. using checksums, certificates or signatures
• CPC Class Codes: G06F 2221/2103 Challenge-response
• CPC Class Codes: G06F 2221/2143 Clearing memory, e.g. to prevent the data from being stolen
• CPC Class Codes: G06F 2221/2149 Restricted operating environment
• CPC Class Codes: G06F 2221/2153 Using hardware token as a secondary aspect

Abstract

A system and method of owner control of an electronic device are provided. Owner identification information, such as data integrity and source authentication information, is stored on the electronic device. Received owner control information is stored on the electronic device where the integrity of the received owner control information is verified and/or the source is authenticated using the owner identification information. In one embodiment, owner identification information comprises an owner signature private key.

Claims

1. A method of owner control of electronic devices, comprising the steps of:

receiving, at an electronic device, owner information which includes owner identification information;

wherein the owner identification information includes source authentication information;

receiving, at the electronic device, owner control information;

wherein the owner control information comprises a description of functions or software applications the electronic device is allowed to use and wherein the owner control information is received at the electronic device at a different time than the owner information is received at the electronic device;

using the received owner identification information to check integrity of the received owner control information; and

determining, based upon the check of the integrity of the owner control information, whether to use the received owner control information on the electronic device based upon the check of the integrity of the owner control information;

wherein the source authentication information is for authenticating that the received owner control information is from an owner of the electronic device.

2. The method of claim 1, wherein the owner identification information includes data integrity information which is used to check the integrity of the received owner control information.

3. The method of claim 2, wherein the data integrity information of the owner information comprises a digital signature.

4. The method of claim 1, wherein mobile device branding information is used in determining whether to use the received owner control information.

5. The method of claim 1, wherein determining whether to use the received owner control information is based upon the source of the owner control information being authenticated.

6. The method of claim 5, wherein the source is an authorized source.

7. The method of claim 6, wherein the authorized source is a source acting on behalf of the owner.

8. The method of claim 1, further comprising the step of checking integrity of the owner identification information by use of a digital signature.

9. The method of claim 8, wherein the digital signature is created by application of a cryptographic algorithm to the owner information.

10. The method of claim 9, wherein the cryptographic algorithm includes use of a symmetric key.

11. The method of claim 9, wherein the cryptographic algorithm includes use of an asymmetric key.

12. The method of claim 1, wherein the owner control information comprises a description of functions or software applications the electronic device is prohibited to use.

13. The method of claim 1, wherein the owner control information comprises a description of functions or software applications the electronic device is permitted to use in a modified manner.

14. The method of claim 1, further comprising the step of determining whether to perform an operation on the electronic device based upon whether the owner information exists on the electronic device.

15. The method of claim 1, further comprising the step of determining whether to perform an operation on the electronic device based upon whether the owner control information exists on the electronic device.

16. The method of claim 1, further comprising the step of determining whether to perform an operation on the electronic device based upon an operation permissions list contained in the owner control information.

17. The method of claim 1, further comprising the steps of:

receiving, at the electronic device, an erase command;

wherein the erase command indicates that the owner information is to be erased from the electronic device;

wherein the erase command is digitally signed; and

determining whether to perform the erase command based upon checking integrity of the digitally signed erase command.

18. The method of claim 1, wherein the owner control information includes an authorized software application list;

wherein the authorized software application list identifies an authorized software application by a hash of the software application;

wherein the software application is used on the electronic device based upon an integrity check using the hash of the software application.

19. The method of claim 1, wherein the electronic device comprises a wireless mobile communications device.

20. The method of claim 1, wherein the electronic device comprises a desktop computer.