METHODS AND SYSTEMS FOR SERVER-INITIATED ACTIVATION OF DEVICE FOR OPERATION WITH SERVER

• US 20140310777A1
• Filed: 04/12/2013
• Published: 10/16/2014
• Est. Priority Date: 04/12/2013
• Status: Active Grant

• Current Assignee: Malikie Innovations Limited (Key Patent Innovations Limited)
• Original Assignee: Blackberry Limited
• Inventors: TRUSKOVSKY, Alexander, MARTIN, Daryl Joseph
• Granted Patent: US 9,363,669 B2
• Time in Patent Office: Days
• US Class Current: 726/4
• CPC Class Codes: H04L 47/70 Admission control; Resource allocation
• CPC Class Codes: H04L 63/0823 using certificates cryptographic mechanisms or cryptographic arrangements for entity authentication involving certificates H04L9/3263
• CPC Class Codes: H04L 63/0869 for achieving mutual authentication cryptographic mechanisms or cryptographic arrangements for mutual authentication H04L9/3273
• CPC Class Codes: H04L 63/10 for controlling access to devices or network resources
• CPC Class Codes: H04L 63/1458 Denial of Service
• CPC Class Codes: H04L 67/04 specially adapted for terminals or networks with limited capabilities; specially adapted for terminal portability
• CPC Class Codes: H04W 12/069 using certificates or pre-shared keys
• CPC Class Codes: H04W 88/02 Terminal devices

Abstract

Methods and systems for enabling activation of a wireless communication device to operate with a server on a wireless communication network. An activation request is pushed from the server to the device, the activation request being authenticated with a signature signed with a server certificate. After the device verifies the activation request using server certificate and signature, a mutually authenticated communication session is established between the device and the server for activation of the device on the server.

Claims

1. A method for enabling activation of a wireless communication device to operate with a server on a wireless communication network, the method comprising:

receiving an activation request from the server, the activation request being authenticated with a signature signed with a server certificate, the server certificate including server identity information;

verifying the activation request by verifying the server identity information and the signature; and

only after receiving input to accept the activation request, establishing a mutually authenticated communication session with the server for activation of the device on the server, the mutually authenticated communication session being authenticated by a device certificate from the device and the same or different server certificate.

2. The method of claim 1, further comprising:

after verification of the activation request and before receiving the input to accept, receiving pre-setting instructions from the server; and

pre-setting the device in accordance with the received pre-setting instructions from the server, pre-settings made on the device being inactive until after receiving the input to accept.

3. The method of claim 2, wherein pre-setting the device comprises at least one of:

pre-setting a security perimeter governing usage of one or more resources on the device;

pre-installing an application on the device; and

pre-setting personal information management (PIM) on the device.

4. The method of claim 2, further comprising removing the pre-settings made on the device after receiving an input to reject the activation request.

5. The method of claim 1, further comprising:

at a first-time communication with the wireless communication network, receiving the device certificate from a certificate authority, the device certificate including device identity information and device authentication information.

6. The method of claim 1, wherein the server certificate also includes server authentication information, and the same server certificate is used to establish the mutually authenticated communication session.

11. The device of claim 6, wherein the device certificate is received from a certificate authority at a first-time communication with the communication network, the device certificate including device identity information and device authentication information.

12. The device of claim 6, wherein the server certificate also includes server authentication information, and the same server certificate is used to establish the mutually authenticated communication session.

7. A wireless communication device configurable to operate with a server on a communication network, the device comprising a processor configured to execute instructions to cause the device to:

receive an activation request from the server, the activation request being authenticated with a signature signed by a server certificate, the server certificate including server identity information;

verify activation request by verifying the server identity information and the signature; and

only after receiving input to accept the activation request, establish a mutually authenticated communication session with the server for activation of the device on the server, the mutually authenticated communication session being authenticated by a device certificate and the same or different server certificate.

8. The device of claim 7, wherein the processor is further configured to execute instructions to cause the device to:

after verification of the activation request and before receiving the input to accept, receive pre-setting instructions from the server; and

pre-set the device in accordance with the received pre-setting instructions from the server, pre-settings made on the device being inactive until after receiving the input to accept.

9. The device of claim 8, wherein pre-setting the device comprises at least one of:

pre-setting a security perimeter governing usage of one or more resources on the device;

pre-installing an application on the device; and

pre-setting personal information management (PIM) on the device.

10. The device of claim 8, wherein the processor is further configured to execute instructions to cause the device to remove the pre-settings made on the device after receiving an input to reject the activation request.

13. A method for enabling activation of a wireless communication device to operate with a server on a wireless communication network, the method comprising:

pushing an activation request to the device, the activation request being authenticated by a signature signed by a server certificate, the server certificate including server identity information; and

after receiving from the device an indication to proceed with activation, establishing a mutually authenticated communication session with the device for activation of the device on the server, the mutually authenticated communication session being authenticated by a device certificate from the device and the same or different server certificate.

14. The method of claim 13, further comprising:

before receiving from the device the indication to proceed with activation, pushing pre-setting instructions to the device, the pre-setting instructions causing pre-setting of the device, pre-settings made on the device being inactive until the activation request is accepted.

15. The method of claim 14, wherein the pre-settings instructions cause pre-setting of the device including at least one of:

pre-setting a security perimeter governing usage of one or more resources on the device;

pre-installing an application on the device; and

pre-setting personal information management (PIM) on the device.

16. The method of claim 14, wherein the pre-setting instructions cause removal of any pre-settings made on the device after the device receives an input to reject the activation request.

18. The method of claim 13, wherein the server certificate also includes server authentication information, and the same server certificate is used to establish the mutually authenticated communication session.

19. The method of claim 13, wherein a different server authentication certificate including server authentication information is used to establish the mutually authenticated communication session.

20. The method of claim 13, wherein the server certificate is received from a certificate authority, when the server first registers with the wireless communication network.

17. The method of 13, wherein establishing the mutually authenticated communication session comprises verifying identity of the device using the device certificate.