COMMUNICATION DEVICE MANAGEMENT OVER A TELECOMMUNICATIONS NETWORK

• US 20130024497A1
• Filed: 10/12/2010
• Published: 01/24/2013
• Est. Priority Date: 10/14/2009
• Status: Abandoned Application

• Current Assignee: Alcatel-Lucent SA (Nokia Corporation)
• Original Assignee: Alcatel-Lucent SA (Nokia Corporation)
• Inventors: Ballot, Jean-Marc, Elloumi, Omar
• Application Number:
  US13/497,292
• Publication Number:
  US 20130024497A1
• Time in Patent Office: Days
• US Class Current: 709/203
• CPC Class Codes: H04L 63/0428 wherein the data content is protected, e.g. by encrypting or encapsulating the payload
• CPC Class Codes: H04W 12/02 Protecting privacy or anonymity, e.g. protecting personally identifiable information [PII]
• CPC Class Codes: H04W 12/37 Managing security policies for mobile devices or for controlling mobile applications

Abstract

In order to manage at least one communications device (DC) implementing an application that uses a service offered by an application server (SA) over a telecommunications network (RT), the device (DC) comprising application data (DonA) specific to the application and communication data (DonC) related to communication parameters for the operation of the service over the telecommunications network, the communication data (DonC) being managed by a management server (SG), the application server (SA) and the device (DC) negotiate and save an encryption key (Kc), and exchange messages by means of the management server (SG), at least one of the messages comprising application data (DonA) which is encrypted with the key by at least one of either the device (DC) or the server (SA).

Claims

1. A method for managing a communication device that implements an application using a service offered by an application server over a telecommunications network, the communication device comprising application data specific to the application and communication data related to communication parameters for an operation of the service over the telecommunications network, the communication data being managed by a management server, the method comprising the steps of:

negotiating an encryption key between the application server and the communication device which each save the negotiated encryption key, and

exchanging messages between the application server and the communication device by way of the management server, at least one of the messages comprising application data that is encrypted with the encryption key by at least one of either the communication device (DC) or the application server (SA).

2. The method according to claim 1, further comprising the steps of:

transmitting a first request from the application server to the management server,

transmitting a second request from the management server to the communication device (DC) depending on the content of the first request,

transmitting a first response from the communication device to the management server, and

transmitting a second response from the management server to the application server depending on the content of the first response,

at least one of the first and second requests and first and second responses comprising application data that is encrypted with the encryption key by at least one of either the communication device or the application server.

3. The method according to claim 1, wherein the application data comprise attributes respectively associated with values, comprising the steps of:

transmitting a first request from the application server to the management server, the first request comprising at least one attribute,

transmitting a second request from the management server to the communication device, the second request comprising at least said attribute,

in the communication device, retrieving a value associated with the attribute comprised within the received second request and encrypting the value with the encryption key,

transmitting a first response from the communication device to the management server, the first response comprising the encrypted value,

transmitting a second response from the management server to the application server, the second response comprising the encrypted value, and

in the application server, decrypting the value encrypted with the encryption key.

4. The method according to claim 3, wherein the application server encrypts said attribute with the encryption key and the first request transmitted from the application server to the management server and the second request transmitted from the management server to the communication device each comprise at least the encrypted attribute, and according wherein the communication device decrypts the encrypted attribute comprised within the received second request with the encryption key, before retrieving a value associated with the decrypted attribute and encrypting the value with the encryption key.

5. The method according to claim 1, wherein the application data comprise attributes respectively associated with values, comprising the steps of:

in the application server, encrypting at least one value with the encryption key,

transmitting a first request from the application server to the management server, the first request (Regl) comprising at least the encrypted value,

transmitting a second request from the management server to the communication device, the second request comprising at least the encrypted value,

in the communication device, decrypting the encrypted value comprised within the second request received with the encryption key, and saving the decrypted value associated with an attribute,

transmitting a first response from the communication device to the management server, the first response comprising an indication that the value has been saved, and

transmitting a second response from the management server to the application server, the second response comprising an indication that the value has been saved.

6. The method according to claim 5, wherein the application server additionally encrypts an attribute associated with the value encrypted with the encryption key and the first request transmitted from the application server to the management server and the second request transmitted from the management server to the communication device each comprise at least the encrypted attribute and the encrypted value, and wherein the communication device additionally decrypts the encrypted attribute comprised within the second request received with the encryption key, before saving the decrypted value associated with the decrypted attribute.

7. An application server configured to manage at least one communication device that implements an application using a service offered by the application server over a telecommunications network, the communication device comprising application data specific to the application and communication data related to communication parameters for an operation of the service over the telecommunications network, the communication data being managed by a management server, the application server comprises:

means for negotiating an encryption key with the communication device and means for saving the negotiated encryption key,

means for encrypting and decrypting application data with the encryption key, and

means for exchanging messages with the communication device by way of the management server, at least one of the messages comprising application data encrypted with the encryption key by at least one of either the communication device or the application server.

8. A communication device that implements an application using a service offered by an application server over a telecommunications network, the communication device comprising application data specific to the application and communication data related to communication parameters for an operation of the service over the telecommunications network, the communication data being managed by a management server, the communication device comprises:

means for negotiating an encryption key with the communication device and means for saving the negotiated encryption key,

means for encrypting and decrypting application data with the encryption key, and

means (ECHc) for exchanging messages with the application server by way of the management server, at least one of the messages comprising application data encrypted with the encryption key by at least one of either the communication device or the application server.

9. A non-transitory computer-readable storage medium having computer executable instructions for performing steps capable of being implemented in an application server to manage at least one communication device that implements an application using a service offered by the application server over a telecommunications network, the communication device comprising application data specific to the application and communication data related to communication parameters for an operation of the service over the telecommunications network, the communication data being managed by a management server, said program comprising:

negotiating an encryption key with the communication device and saving the negotiated encryption key, and

exchanging messages with the communication device by way of the management server, at least one of the messages comprising application data encrypted with the encryption key by at least one of either the communication device or the application server.

10. A non-transitory computer-readable storage medium having computer executable instructions for performing steps capable of being implemented in a communication device to implement an application using a service offered by an application server over a telecommunications network, the communication device comprising application data specific to the application and communication data related to communication parameters for an operation of the service over the telecommunications network, the communication data being managed by a management server, comprising:

negotiating an encryption key with the application server and saving the negotiated encryption key, and

exchanging messages with the application server by way of the management server, at least one of the messages comprising application data encrypted with the encryption key by at least one of either the communication device or the application server.