Enabling conformance to legislative requirements for mobile devices

• US 6,470,447 B1
• Filed: 06/10/1999
• Issued: 10/22/2002
• Est. Priority Date: 03/31/1999
• Status: Expired due to Fees

• Current Assignee: International Business Machines Corporation
• Original Assignee: International Business Machines Corporation
• Inventors: Lambert, Howard Shelton, Orchard, James Ronald Lewis
• Primary Examiner(s): Darrow, Justin T.
• Application Number:
  US09/329,826
• Time in Patent Office: 1,230 Days
• Field of Search: 713/151, 713/152, 713/153, 713/154, 380/258, 380/270, 455/426, 455/428, 455/429, 455/432, 455/433, 455/435, 455/436, 455/437, 455/446, 455/550, 455/560
• US Class Current: 713/151
• CPC Class Codes: H04W 12/02 Protecting privacy or anonymity, e.g. protecting personally identifiable information [PII]
• CPC Class Codes: H04W 12/033 of the user plane, e.g. user's traffic
• CPC Class Codes: H04W 12/30 Security of mobile devices; Security of mobile applications
• CPC Class Codes: H04W 12/64 using geofenced areas
• CPC Class Codes: H04W 12/67 Risk-dependent, e.g. selecting a security level depending on risk profiles

Abstract

Provided are a method and a mechanism for dynamically controlling the performance of communication-related operations of a mobile device in accordance with legislative requirements of the particular location of the mobile device and the location of the computing device with which it is to communicate, and also in accordance with communication requirements of application programs at either end of the communication link. A first use of the invention is for ensuring conformance of a mobile device'"'"'s communications to the cryptographic requirements of different countries, even when the device crosses a country boundary during communication.

Claims

1. A computer program product comprising computer readable program code stored on a computer readable storage medium, for providing communication services to application programs on a first computing device, the program code including means for dynamically controlling the operation of the first computing device to execute processes

to respond to automatic identification of the country location of at least the first computing device by obtaining information for identifying permitted cryptographic components for the identified country or countries, and

to dynamically select or validate selection of a cryptographic component in accordance with the obtained information and in accordance with communication requirements of at least a first application program on the first computing device, for encrypting and decrypting data.

2. A computer program product according to claim 1, wherein validation of the selection is performed on the first computing device, or on a second computing device with which the first computing device communicates, in accordance with communication requirements of a second application program on the second computing device.

3. A computer program product according to claim 2 wherein, in response to a failure to dynamically select or validate selection of a cryptographic component which satisfies the requirements of both the first and second application programs, the communication connection is broken.

4. A computer program product according to claim 1, wherein validation of the selection is performed on the first computing device, or on a second computing device with which the first computing device communicates, in accordance with an identification of permitted cryptographic components for the country location of the second computing device.

5. A computer program product according to claim 1, for initiating automatic identification of the country location of the first computing device when establishing a communication connection between an application program on the first computing device and a remote application program.

6. A computer program product according to claim 5, for repeating initiation of the automatic country location identification in response to predefined events during the communication.

7. A computer program product according to claim 6, wherein said predefined events include the processing of an instruction to encrypt or decrypt data.

8. A computer program product according to claim 6, for controlling the operation of a cellular telephone, wherein said predefined events include receipt of a new cell identifier from a cellular network access node.

9. A computer program product according to claim 6, wherein said steps of obtaining information for identifying permitted cryptographic components and dynamically selecting or validating selection of a cryptographic component are only repeated when the country location has changed.

10. A computer program product according to claim 1, wherein the dynamically selected cryptographic component is a digital signature component.

11. A computer program product according to claim 10, wherein the identification of permitted components and dynamic selection or validation of selection are performed in response to a financial transaction instruction identifier.

12. A computer program product according to claim 1, including means for dynamically selecting or validating selection of an authenticator component in accordance with the communication requirements of at least a first application program on the first computing device.

13. A computer program product according to claim 1, including means for dynamically selecting or validating selection of a compressor component in accordance with the communication requirements of at least a first application program on the first computing device.

14. A method for dynamically controlling the operation of a first computing device including:

in response to automatic identification of the country location of at least the first computing device, obtaining information for identifying permitted cryptographic components for the identified country or countries; and

dynamically selecting or validating selection of a cryptographic component in accordance with the obtained information and in accordance with communication requirements of at least a first application program on the first computing device, for encrypting and decrypting data.

15. A method according to claim 14, including dynamically selecting or validating selection of an authenticator component in accordance with the communication requirements of at least a first application program on the first computing device.

16. A method according to claim 14, including dynamically selecting or validating selection of a compressor component in accordance with the communication requirements of at least a first application program on the first computing device.

17. A mobile computing device including software for dynamically controlling the operation of the device to ensure conformance to legislative requirements of the current location of the device, the software controlling the device to execute processes

to respond to automatic identification of the country location of at least the mobile computing device by obtaining information for identifying permitted cryptographic components for the identified country or countries, and

to dynamically select or validate selection of an operation sequence in accordance with the obtained information and in accordance with communication requirements of at least a first application program on the mobile computing device, for encrypting and decrypting data.

18. A computing apparatus for interoperating with a mobile computing device, the computing apparatus including software for dynamically controlling the operation of the computing apparatus to ensure conformance to legislative requirements of both the location of the computing apparatus and of the current location of the mobile computing device, the software controlling the apparatus to execute processes

to respond to automatic identification of the country location of the mobile computing device by obtaining information for identifying permitted cryptographic components for the identified country location of the mobile device and for identifying permitted cryptographic components for the country location of the computing apparatus, and

to dynamically select or validate selection of a cryptographic component in accordance with the obtained information and in accordance with communication requirements of at least a first application program on the mobile computing device, for encrypting and decrypting data.