Data obtaining method and terminals

• US 7,174,333 B2
• Filed: 11/21/2001
• Issued: 02/06/2007
• Est. Priority Date: 11/24/2000
• Status: Expired due to Term

• Current Assignee: NTT Docomo Incorporated (Nippon Telegraph and Telephone Corporation)
• Original Assignee: NTT Docomo Incorporated (Nippon Telegraph and Telephone Corporation)
• Inventors: Yamamoto, Masaaki, Inoue, Kyoko, Yamada, Kazuhiro, Kamiya, Dai, Hiramatsu, Yoshiaki, Sumi, Yutaka, Tokuda, Motoki, Ooi, Tatsuro, Ooseki, Eriko
• Primary Examiner(s): Gaffin; Jeffrey
• Assistant Examiner(s): Wu; Yicun
• Application Number:
  US10/204,363
• Publication Number:
  US 20030097373A1
• Time in Patent Office: 1,903 Days
• Field of Search: 707/9, 707/10, 707/104.1, 707/201, 709/203, 709/229, 713/200, 713/201
• US Class Current: 1/1
• CPC Class Codes: G06F 9/445 Program loading or initiating bootstrapping G06F9/4401; security arrangements for program loading or initiating G06F21/57
• CPC Class Codes: H04L 63/0428 wherein the data content is protected, e.g. by encrypting or encapsulating the payload
• CPC Class Codes: H04L 63/166 at the transport layer
• CPC Class Codes: Y10S 707/99939 Privileged access
• CPC Class Codes: Y10S 707/99945 Object-oriented database structure processing

Abstract

At a terminal where communication can take place via a network, ADF in which property information on data is stored is received, and based upon the communication systems (ordinary/SSL) which were used for receiving this ADF and the communication system which is used for receiving JAR in which the entity of the above mentioned data is stored, whether a communication pattern is allowable determined. JAR is received if the communication pattern is allowable, and JAR is not received if the communication pattern is not allowable for security reasons. In other words, data is obtained only when the communication pattern is allowable.

Claims

1. A method for receiving an application by a terminal adapted to communicate via a network, the application comprising at least a first portion and a second portion, wherein the first portion comprises a file describing the application and the second portion comprises an entity of data for the application, the method comprising:

accessing via the network to receive the application;

implementing a first communication mode to receive the first portion of the application via the network, wherein the first communication mode is configured to support a first security level of communication;

identifying a second communication mode implementable to receive the second portion of the application via the network, wherein the second communication mode is configured to support a second security level of communication;

determining whether the second security level of the second communication mode is at least as secure as the first security level of the first communication mode; and

implementing the second communication mode to receive the second part of the application only if the second security level of the second communication mode is at least as secure as the first security level of the first communication mode.

2. A method of claim 1, wherein the terminal comprises a mobile telephone.

3. A method of claim 1, wherein accessing to receive the application comprises designating the first communication mode.

4. A method of claim 1, wherein identifying a second communication mode comprises identifying a designation of the second communication mode contained in the first portion.

5. A method of claim 1, wherein the second communication mode is the first communication mode.

6. A method for receiving an application by a terminal adapted to communicate via a network, the application comprising at least a first portion and a second portion, wherein the first portion comprises a file describing the application and the second portion comprises an entity of data for the application, the method comprising:

accessing via the network to receive the application;

implementing a first communication mode to receive the first portion of the application via the network, wherein the first communication mode is configured to support a first security level of communication;

identifying a second communication mode implementable to receive the second portion of the application via the network, wherein the second communication mode is configured to support a second security level of communication;

implementing the second communication mode to receive the second portion of the application via the network;

determining whether the second security level of the second communication mode is at least as secure as the first security level of the first communication mode; and

executing the received application only if the second security level of the second communication mode is at least as secure as the first security level of the first communication mode.

7. A method of claim 6, wherein executing the application comprises implementing a third communication mode for communication, wherein the third communication mode is configured to support a third security level of communication which is at least as secure as the second security level of the second communication mode.

8. A method of claim 6, wherein the terminal comprises a mobile telephone.

9. A method of claim 6, wherein accessing to receive the application comprises designating the first communication mode.

10. A method of claim 6, wherein identifying a second communication mode comprises identifying a designation of the second communication mode contained in the first portion.

11. A method of claim 6, wherein the second communication mode is the first communication mode.

12. A terminal for receiving an application comprising at least a first portion and a second portion, wherein the first portion comprises a file describing the application and the second portion comprises an entity of data for the application, the terminal being adapted to communicate via a network, the terminal comprising:

network access control operable to access via the network to receive the application;

first communication control operable to implement a first communication mode to receive the first portion of the application via the network, wherein the first communication mode is configured to support a first security level of communication;

communication mode identifier operable to identify a second communication mode implementable to receive the second portion of the application via the network, wherein the second communication mode is configured to support a second security level of communication;

security level comparator operable to determine whether the second security level of the second communication mode is at least as secure as the first security level of the first communication mode, and

second communication control operable to implement the second communication mode to receive the second part only if the second security level of the second communication mode is at least as secure as the first security level of the first communication mode.

13. A terminal of claim 12, wherein the terminal comprises a mobile telephone.

14. A terminal of claim 12, wherein when accessing to receive the application, the network access control designates the first communication mode.

15. A terminal of claim 12, wherein when the communication mode identifier identifies the second communication mode based on a designation of the second communication mode contained in the first portion.

16. A terminal of claim 12, wherein the second communication mode is the first communication mode.

17. A terminal for receiving an application comprising at least a first portion and a second portion, wherein the first portion comprises a file describing the application and the second portion comprises an entity of data for the application, the terminal being adapted to communicate via a network, the terminal comprising:

network access control operable to access via the network to receive the application;

first communication control operable to implement a first communication mode to receive the first portion of the application via the network, wherein the first communication mode is configured to support a first security level of communication;

communication mode identifier operable to identify a second communication mode implementable to receive the second portion of the application via the network, wherein the second communication mode is configured to support a second security level of communication;

second communication control operable to implement the second communication mode to receive the second portion of the application; and

security level comparator operable to determine whether the second security level of the second communication mode is at least as secure as the first security level of the first communication mode, and

application control operable to execute the received application only if the second security level of the second communication mode is at least as secure as the first security level of the first communication mode.

18. A terminal of claim 17, wherein the application control comprises a third communication control operable to implement a third communication mode for communication, wherein the third communication mode is configured to support a third security level of communication which is at least as secure as the second security level of the second communication mode.

19. A terminal of claim 17, wherein the terminal comprises a mobile telephone.

20. A terminal of claim 17, wherein when accessing to receive the application, the network access control designates the first communication mode.

21. A terminal of claim 17, wherein when the communication mode identifier identifies the second communication mode based on a designation of the second communication mode contained in the first portion.

22. A terminal of claim 17, wherein the second communication mode is the first communication mode.