Method and system for securely interacting with managed data from multiple devices

• US 6,233,608 B1
• Filed: 06/07/1999
• Issued: 05/15/2001
• Est. Priority Date: 12/09/1997
• Status: Expired due to Term

• Current Assignee: Unwired Planet LLC (JP Morgan Chase & Co)
• Original Assignee: Openwave Systems Incorporated (JP Morgan Chase & Co)
• Inventors: Laursen, Andrew L., Martin, Jr., Bruce K., Rossmann, Alain S.
• Primary Examiner(s): Heckler, Thomas M.
• Application Number:
  US09/320,296
• Time in Patent Office: 708 Days
• Field of Search: 713/2, 713/201, 713/200, 709/203, 709/214, 709/217, 709/227, 709/218, 709/219, 709/10, 455/550, 455/556, 455/557
• US Class Current: 709/217
• CPC Class Codes: G06F 21/41 where a single sign-on provides access to a plurality of computers
• CPC Class Codes: G06F 21/445 by mutual authentication, e.g. between devices or programs
• CPC Class Codes: G06F 21/6227 where protection concerns the structure of data, e.g. records, types, queries
• CPC Class Codes: G06F 2221/2117 User registration
• CPC Class Codes: G06F 2221/2119 Authenticating web pages, e.g. with suspicious links
• CPC Class Codes: G06Q 20/108 Remote banking, e.g. home banking
• CPC Class Codes: H04L 63/0435 wherein the sending and receiving network entities apply symmetric encryption, i.e. same key used for encryption and decryption cryptographic mechanisms or cryptographic arrangements for symmetric key encryption H04L9/06
• CPC Class Codes: H04L 63/0815 providing single-sign-on or federations
• CPC Class Codes: H04L 63/0869 for achieving mutual authentication cryptographic mechanisms or cryptographic arrangements for mutual authentication H04L9/3273
• CPC Class Codes: H04L 67/04 specially adapted for terminals or networks with limited capabilities; specially adapted for terminal portability
• CPC Class Codes: H04L 67/14 Session management for real-time applications in data packet communications networks H04L65/1066
• CPC Class Codes: H04L 69/08 Protocols for interworking; Protocol conversion
• CPC Class Codes: H04L 69/329 in the application layer [OSI layer 7]
• CPC Class Codes: H04L 9/40 Network security protocols
• CPC Class Codes: H04M 1/2757 by data transmission, e.g. downloading
• CPC Class Codes: H04M 1/72445 for supporting Internet browser applications
• CPC Class Codes: H04W 12/068 using credential vaults, e.g. password manager applications or one time password [OTP] applications
• CPC Class Codes: H04W 4/00 Services specially adapted for wireless communication networks; Facilities therefor
• CPC Class Codes: H04W 4/18 Information format or content conversion, e.g. adaptation by the network of the transmitted or received information for the purpose of wireless delivery to users or terminals
• CPC Class Codes: H04W 8/18 Processing of user or subscriber data, e.g. subscribed services, user preferences or user profiles; Transfer of user or subscriber data
• CPC Class Codes: H04W 88/02 : Terminal devices
• CPC Class Codes: Y10S 707/99934 : Query formulation, input preparation, or translation
• CPC Class Codes: Y10S 707/99945 : Object-oriented database structure processing

Abstract

The present invention has been made in consideration of thin devices efficiently communicating ideas and transactions into data networks by using other devices with fill functional user interface in the networks. According to one aspect of the present invention, the thin device exclusively controls the authentication of a rendezvous that is associated with a user account in a server. The thin device running a micro-browser provisions the rendezvous with a set of credential information in an authenticated and secure communication session so that the provisioning process is truly proprietary. To access the user account, the other devices equipped with well known browsers must submit the correct credential information to the rendezvous for verification in the server. Once admitted, the other devices can update managed information in the user account, individually and respectively, thereby the thin device is able to conduct desired transactions based on the managed information in the user account without the need to key in pertinent information of the transactions.

Claims

1. A method for accessing managed data contained in a data network system, the method comprising:

executing a first set of program instructions in a wireless telephone of a subscriber, the wireless telephone having a display screen and being in communication, over a wireless data network, with a server hosting the managed data, the managed data being uniquely associated with the wireless telephone of the subscriber and being accessible by a computing device executing a second set of program instructions and coupled to the server through a wired data network, the computing device being able to alter the managed data at the server via the wired data network, wherein the wireless data network and the data network utilize a first communication protocol and a second communication protocol, respectively;

sending a request to the server to retrieve the managed data after activation of a predefined key of the wireless telephone;

receiving, at the wireless telephone, the managed data from the server via the wireless data network, the managed data being presented in a first markup language interpretable by the first set of program instructions when presented to the wireless telephone and being presented in a second markup language interpretable by the second set of program instructions when presented to the computing device; and

displaying the managed data on the display screen of the wireless telephone.

2. The method as recited in claim 1, wherein the managed data comprises an address book and bookmarks entered from the computing device executing the second set of program instructions.

3. The method as recited in claim 1, wherein the first markup language is the same as the second markup language.

4. The method as recited in claim 1, wherein the first markup language is Handheld Device Markup Language (HDML) and the second markup language is Hypertext Markup Language (HTML).

5. The method as recited in claim 1;

wherein the request comprises an address identifier identifying the server.

6. The method as recited in claim 5, wherein the address identifier is a universal resource locator (URL).

7. The method as recited in claim 1,

wherein the managed data comprises a plurality of selectable hyperlinks, each of the hyperlinks providing access to a resource in the data network; and

wherein the displaying comprises displaying at least one of the selectable hyperlinks on the display screen of the wireless telephone using the first set of program instructions.

8. The method as recited in claim 7, wherein the first set of program instructions is included in a first browser being operated in the wireless telephone and the second set of program instructions is included in a second browser being operated in the computing device.

9. The method as recited in claim 8, the method further comprising:

sending a new request from the wireless telephone to the server using the first set of program instructions to fetch information identified by one of the hyperlinks when the one of the hyperlinks being displayed is selected.

10. A method for accessing data contained in a data network system, the method comprising:

hosting, at a server, data associated with an account for a wireless telephone having a display screen, the data comprising a plurality of information categories and being accessible by a computing device remotely located and coupled to a data network selected from a group consisting of the Internet, a private network and a network of private networks;

receiving a request from the wireless telephone through a wireless data network to access the data, the request comprising a selection of one of the information categories;

retrieving information pertaining to the selected category if such information is co-located with the account and after the request is authenticated with respect to the account; and

forwarding the information to the wireless telephone in a first format displayable on the display screen of the wireless telephone.

11. The method as recited in claim 10, wherein the request is an update to the one of the information categories and causes the data to be updated with the update.

12. The method as recited in claim 10, further comprising:

prompting the computing device for credential information when the computing device accesses the data;

providing access to the data in a second format after the credential information is verified; and

updating the data upon receiving updated information from the computing device.

13. The method as recited in claim 12, wherein the first format is in a first markup language and the second format is in a second markup language.

14. The method as recited in claim 10, wherein the data comprises a plurality of hyperlinks, and the selected category is one of the hyperlinks;

and wherein the retrieving further comprises;

contacting a resource identified by the one of the hyperlinks over the data network;

fetching the information in a second format from the resource; and

converting the respective information in the second format to the first format.

15. The method as recited in claim 14, wherein the first format is a first markup language and the second format is a second markup language.

16. A method for interacting with managed data from a wireless computing device or a wired computing device, the managed data being stored on a server coupled to a data network, said method comprising:

permitting access to the managed data in a secure manner via the wired computing device;

receiving user input from the wired computing device;

altering the managed data being stored at the server based on the user input from the wired computing device; and

thereafter permitting access to the managed data in a secure manner via the wireless computing device and then forwarding the managed data to the wireless computing device for use therein.

17. A method as recited in claim 16, wherein the managed data is used on the wireless computing device to generate screen displays on a display screen of the wireless computing device.

18. A method as recited in claim 16, wherein the managed data comprises at least one of address book data and bookmark data.

19. A method as recited in claim 16, wherein the managed data comprises user account data.

20. A method as recited in claim 16, wherein the wireless computing device is associated with a user;

and

wherein the managed data is personalized information of the user.

21. A method as recited in claim 16, wherein said method further comprises:

altering the managed data being stored at the server based on the user input from the wireless computing device.

22. A method as recited in claim 16, wherein the wired computing device is a personal computer.

23. A method as recited in claim 16, wherein said permitting access to the managed data in a secure manner via the wireless computing device comprises:

authenticating the wireless computing device to the server; and

authenticating the server to the wireless computing device.

24. A method as recited in claim 16, wherein the wired computing device is a personal computer having a standard size keyboard, and the wireless computing device is a small, handheld device having a telephone-type keypad.

25. A method as recited in claim 24, wherein the managed data represents frequently requested data, thereby improving ease of use of the wireless computing device by allowing entry of the frequently requested data through use of the standard size keyboard, yet being for use by the wireless computing device.

26. A method as recited in claim 16, wherein the wired computing device is a personal computer having a substantially more powerful user input mechanism than the wireless computing device which is a small, handheld device,

wherein the managed data represents frequently requested data, and

wherein said method improves ease of use by allowing entry of the frequently requested data through use of the more powerful input mechanism of the wired computing device, yet the frequently requested data so entered being for use by the wireless computing device.

27. A method as recited in claim 26, wherein a user input mechanism for the wireless computing device has ambiguous keys that require several key strokes to input a particular key, whereas the more powerful input mechanism has non-ambiguous keys require only a single keystroke to input a particular key.

28. A method as recited in claim 16, wherein the wireless computing device is a cellular telephone.

29. A method as recited in claim 28, wherein the wired computing device is a personal computer.

30. A method as recited in claim 16, wherein said permitting access to the managed data in a secure manner via the wired computing device uses a self-provisioning rendezvous.

31. A method as recited in claim 30, wherein the self-provisioning rendezvous is accessed by an address identifier.

32. A method as recited in claim 31, wherein the address identifier is a universal resource locator (URL).

33. A computer readable medium containing program code for accessing data contained in a data network system, the computer readable medium comprising:

first program code for displaying the data on a display screen of a wireless device, the data comprising a plurality of selectable information categories and hosted in a server with at least one of the information categories hyperlinking to a resource on a data network, the data also being accessible though a computing device remotely located and coupled to the data network;

second program code for receiving a selection of one of the information categories when the one of the information categories is selected by a user;

third program code, executable in response to the selection, for sending a request for information identified by the selection to the server;

fourth program code for receiving the information from the server in a first format; and

fifth program code for displaying the respective information on the display screen.

34. The computer readable medium as recited in claim 33, wherein the selection is made through a keypad with reference to the information categories being displayed on the display screen.

35. The computer readable medium as recited in claim 33, wherein the first format is a markup language.

36. The computer readable medium as recited in claim 33, wherein the computer readable medium further comprises:

sixth computer program code for receiving updated information entered from a telephone keypad; and

seventh computer program code for sending the updated information to the server, the data being updated with the updated information.

37. A computer readable medium containing program code for accessing data in a data network system, the program code comprising:

a first program code for receiving a request, through a wireless data network, sent from a first browser being executed in a wireless telephone to access the data hosted in a database;

the data associated with the wireless telephone and being accessible via a second browser executing on a computing device coupled to a data network that is part of the data network system;

a second program code for authenticating the request with respect to an account associated to the wireless telephone; and

a third program code for forwarding the data in a format supported by the first browser, through the wireless data network, to the wireless telephone.

38. The computer readable medium as recited in claim 37, wherein the request comprises an identification identifying the wireless telephone;

and the program code further comprises a fourth program code for verifying if the wireless telephone is authorized by comparing the identification with the account.

39. The computer readable medium as recited in claim 37, wherein the request comprises credential information;

and the program code further comprises a fourth program code for verifying if the wireless telephone is authenticated by comparing the credential information with the account.

40. The computer readable medium as recited in claim 37, wherein the first browser is executed by a processor of the wireless telephone, and further wherein the processor controls a telephony function of the wireless telephone.

41. The computer readable medium as recited in claim 37, wherein the data includes a plurality of hyperlinks, each providing a link to a resource in the data network.

42. The computer readable medium as recited in claim 41, wherein if the request indicates one of the hyperlinks, the program code further comprises:

a fourth program code for retrieving information identified by the one of the hyperlinks from the data network.

43. The computer readable medium as recited in claim 37, wherein if the credential information is different from an existing credential information after the wireless telephone is authenticated, the program code further comprises a fourth program code for updating the account with the new credential information.

44. The computer readable medium as recited in claim 43, wherein the new credential information must be provided when the second browser executing on the computing device attempts to access the data.

45. The computer readable medium as recited in claim 44, wherein the format is in a first markup language supported by the first browser and the data is in a second markup language supported by the second browser.

46. The computer readable medium as recited in claim 45, wherein the second markup language provides a graphic user interface so that said data can be updated from the computing device.

47. A wireless telephone for accessing data in a data network system the wireless telephone comprising:

a display screen;

a memory containing a set of program code for a first browser;

a processor, coupled to the display screen and the memory, executing the set of program code to enable the first browser to perform operations of;

sending a request to retrieve the data from a wireless data network, the data being hosted in a server coupled between the wireless data network utilizing a first communication protocol and a data network utilizing a second communication protocol;

receiving the data presented in a first markup language;

displaying the data on the display screen; and

wherein the data is accessible by a computing device operating a second browser and coupled to the data network, and wherein the data presented to the computing device is in a second markup language.

48. The wireless telephone as recited in claim 47, wherein the request comprises an identifier identifying the wireless telephone so that the wireless telephone can be authenticated by the server when the request is received.

49. The wireless telephone as recited in claim 47, wherein the first markup language and the second markup language are the same.

50. The wireless telephone as recited in claim 47, wherein the processor controls a telephony operation of the wireless telephone.