Method for defining and checking a connection establishment authorisation, associated program data packet, associated device and associated program

• US 7,448,082 B2
• Filed: 11/04/2002
• Issued: 11/04/2008
• Est. Priority Date: 11/19/2001
• Status: Expired due to Fees

• Current Assignee: Nokia Siemens Networks GmbH & Company KG (Nokia Corporation)
• Original Assignee: Nokia Siemens Networks GmbH & Company KG (Nokia Corporation)
• Inventors: Pasteanu, Calinel
• Primary Examiner(s): Zand; Kambiz
• Assistant Examiner(s): Shaifer Harriman; Dant B
• Application Number:
  US10/496,056
• Publication Number:
  US 20050020253A1
• Time in Patent Office: 2,192 Days
• Field of Search: 726/21
• US Class Current: 726/21
• CPC Class Codes: H04W 76/18 Management of setup rejection or failure
• CPC Class Codes: H04W 8/245 from a network towards a terminal
• CPC Class Codes: H04W 92/18 between terminal devices

Abstract

The present invention relates to, inter alia, a method according to which an authorization datum is predefined for a program before transmission to an appliance of a user, the value of the datum indicating a right to establish a connection. A security program which is independent of the program cited authorizes the establishment of a connection via a data transmission network during the running of the program, according to the value of the authorization datum, or rejects the establishment of the connection.

Claims

1. A method for defining and checking a connection establishment authorization, comprising:

specifying for a program, before transfer of the program to a device of a user, an item of authorization data of which a value of the item specifies connection establishment rights;

transferring the program jointly with the authorization data to the device;

storing the program in a memory unit of the device together with the authorization data;

initiating a connection establishment, on execution of the program via a data transmission network; and

performing one of the steps of allowing and rejecting, via a security program which is independent of the program, the connection establishment depending on the value of the authorization data.

2. The method in accordance with claim 1, wherein the method is executed in a terminal of a mobile radio data transmission network.

3. The method in accordance with claim 1, wherein the authorization data is transmitted outside machine commands or commands in a byte code of the program.

4. The method in accordance with claim 1, wherein at least two kinds of program types and at least two values for the authorization data are defined, permitted assignments of program types to at least one value are prespecified, and the value of the authorization data, depending on the program type, has a value permitted in accordance with the assignment.

5. The method in accordance with claim 4, wherein the assignment is defined in a standard, preferably in an internationally valid standard.

6. The method in accordance with claim 4, wherein at least one of a third-party supplier program type is defined to which at least one program is assigned which is made available by a third-party supplier who is distinct from a manufacturer of the device and from a network operator of the network via which the device establishes the connection, and a device manufacturer program type is defined to which at least one program is assigned which is made available by a manufacturer of the device, and a network operator program type is defined to which at least one program is assigned which is made available by a network operator of the data transmission network via which the device establishes the connection.

7. The method in accordance with claim 4, wherein at least one of a value allows a connection establishment with agreement of a user, a value allows an unrestricted connection establishment, and a value allows a connection establishment depending on an amount of a credit, and wherein the values differ from one another.

8. The method in accordance with claim 1, wherein one of the value of the authorization data cannot be changed in the device, and the value of the authorization data only can be changed with aid of the security program.

9. The method in accordance with claim 1, wherein the security program records at least one of approval and rejection of a connection establishment in a log file.

10. The method in accordance with claim 1, wherein, together with the authorization data, at least one of at least one digital certificate and a digital key are transmitted.

11. The method in accordance with claim 10, wherein the authorization data is at least one of transmitted digitally encrypted and stored digitally encrypted.

12. The method in accordance with claim 9, wherein the log file is stored digitally encrypted.

13. A data processing system for defining and checking a connection establishment authorization, comprising:

a program execution unit for executing a program which initiates the connection establishment via a data transmission network; and

a test unit for allowing or rejecting the connection establishment depending on a value of an authorization data item assigned to the program, wherein the value specifies connection establishment rights; and

a receive unit for receiving the program together with the authorization data, wherein the program is jointly transferred with the authorization data to a device of a user, the program is stored in a memory unit of the device together with the authorization data, the connection establishment is initiated on execution of the program via the data transmission network, and the connection establishment is allowed or rejected, via a security program which is independent of the program, depending on the value of the authorization data.

14. An article of manufacture with a computer program embodied therein, the computer program comprising:

a code segment for effecting determination of a value of an authorization data item, the value specifying a connection establishment right;

a code segment for effecting allowance or rejection of a connection establishment of another program;

a code segment for effecting specification of a program, before transfer of the program to a device of a user, the item of authorization data;

a code segment for effecting transfer of the program jointly with the authorization data to the device;

a code segment for affecting storage of the program in a memory unit of the device together with the authorization data;

a code segment for affecting initiation of the connection establishment, upon execution of the program via a data transmission network; and

a code segment for affecting allowance or rejection, via a security program which is independent of the program, the connection establishment depending on the value of the authorization data.