Test enabled application execution

• US 7,536,172 B2
• Filed: 08/21/2006
• Issued: 05/19/2009
• Est. Priority Date: 08/15/2001
• Status: Active Grant

• Current Assignee: Qualcomm, Inc.
• Original Assignee: Qualcomm, Inc.
• Inventors: Minear, Brian, Chmaytelli, Mazen, Lundblade, Laurence, Oliver, Mitchell B.
• Primary Examiner(s): Cumming; William D
• Application Number:
  US11/466,036
• Publication Number:
  US 20060281440A1
• Time in Patent Office: 1,002 Days
• Field of Search: 455/410, 455/67.1, 705/59
• US Class Current: 455/410
• CPC Class Codes: G06F 21/335 for accessing specific resources, e.g. using Kerberos tickets
• CPC Class Codes: G06F 21/51 at application loading time, e.g. accepting, rejecting, starting or inhibiting executable software based on integrity or source reliability
• CPC Class Codes: G06F 21/57 Certifying or maintaining trusted computer platforms, e.g. secure boots or power-downs, version controls, system software checks, secure updates or assessing vulnerabilities
• CPC Class Codes: G06F 2221/2129 Authenticate client device independently of the user
• CPC Class Codes: G06F 2221/2141 Access rights, e.g. capability lists, access control lists, access tables, access matrices
• CPC Class Codes: G06F 2221/2149 Restricted operating environment
• CPC Class Codes: G06F 9/468 Specific access rights for resources, e.g. using capability register
• CPC Class Codes: H04L 63/102 Entity profiles
• CPC Class Codes: H04L 63/12 Applying verification of the received information cryptographic mechanisms or cryptographic arrangements for data integrity or data verification H04L9/32
• CPC Class Codes: H04W 12/08 Access security
• CPC Class Codes: H04W 12/10 Integrity
• CPC Class Codes: H04W 12/71 Hardware identity

Abstract

A method for executing an application on a wireless device is provided. The method includes receiving, at the wireless device, a test permission that indicates the wireless device is authorized to execute the application on a wireless network in a testing capacity. The test permission is associated with the wireless device. The method further includes requesting the execution of the application on the wireless device and evaluating whether the wireless device includes the test permission. If the wireless device includes the test permission, the method further includes executing the application on the wireless device. The application is executed on the wireless device even if the application includes other permissions necessary to execute the application on the wireless device or the wireless network.

Claims

1. A method for executing an application on a wireless device, comprising:

receiving, at the wireless device, a test permission that indicates the wireless device is authorized to execute the application on a wireless network in a testing capacity, the test permission being associated with the wireless device;

requesting the execution of the application on the wireless device;

evaluating whether the wireless device includes the test permission; and

if the wireless device includes the test permission, executing the application on the wireless device, wherein the application is executed on the wireless device even if the application includes other permissions necessary to execute the application on the wireless device or the wireless network.

2. The method of claim 1, wherein if the wireless device does not include the test permission, the method further comprises:

testing the application to ensure that the application satisfies requirements for an environment in which the application will execute;

verifying that the application is being executed on a permitted device and on a permitted wireless network; and

removing the application if the application performs an illegal or undesirable action.

3. The method of claim 1, further comprising, prior to receiving the test permission, requesting the test permission from an authorizing entity that manages test permissions.

4. The method of claim 3, wherein requesting the test permission further comprises submitting profile information about a developer entity on whose behalf the request is being made.

5. The method of claim 1, further comprising:

denying the executing of the application if the evaluation of the test permission indicates access is not allowed.

6. The method of claim 1, wherein evaluating whether the wireless device includes the test permission further includes:

comparing a unique identifier associated with the wireless device to information derived from the test permission to determine if the wireless device is authorized for the test permission.

7. The method of claim 1, wherein evaluating whether the wireless device includes the test permission farther includes evaluating a modification detection technique to verify the integrity of the test permission.

8. The method of claim 7, wherein the modification detection technique comprises a digital signature.

9. The method of claim 1, wherein the test permission is application independent.

10. A wireless device, comprising:

an input to receive a test permission that indicates the wireless device is authorized to execute an application on a wireless network in a testing capacity, the test permission being associated with the wireless device;

a storage to store the test permission and a unique identifier associated with the wireless device;

a control program configured to evaluate whether access to the application is authorized by evaluating the test permission and the unique identifier, the evaluation being independent of the application including other permissions necessary to access the application; and

if the access is authorized, accessing the application to;

test the application to ensure that the application satisfies requirements for an environment in which the application will execute, and

assign the other permissions to the application to control which devices or systems may execute the application.

11. The wireless device of claim 10, wherein the control program is further configured to access a second application by evaluating the test permission and the unique identifier.

12. The wireless device of claim 10, wherein the unique identifier is an electronic serial number (“

ESN”

).

13. The wireless device of claim 10, wherein the control program is further configured to verify the integrity of the test permission by analyzing a modification detection technique associated with the test permission.

14. The wireless device of claim 13, wherein the modification detection technique comprises a digital signature.

15. A method for managing test permissions, comprising:

storing profile information related to an entity;

receiving a request by the entity for a test permission for a wireless device, the wireless device having a unique identifier, the test permission being operative to enable the wireless device to execute an application on the wireless device independent of the application including other permissions necessary to execute the application on the wireless device or a wireless network;

associating the test permission with the unique identifier for the wireless device and with the profile information related to the entity; and

transmitting the test permission to the wireless device.

16. The method of claim 15, wherein associating the test permission includes binding the test permission to an Electronic Serial Number (ESN) associated with the wireless device.

17. The method of claim 15, wherein the test permission is assigned based on an evaluation of the profile information related to the entity, the evaluation being conducted to assess a likelihood of risk to the wireless network caused by allowing the entity to test applications on the wireless network.

18. The method recited in claim 15, wherein the test permission is associated with a modification detection technique prior to being transmitted to the wireless device.

19. The method recited in claim 18, wherein the modification detection technique comprises a digital signature.

20. A system for accessing applications on a wireless device, comprising:

means for receiving, at the wireless device, a test permission that indicates the wireless device is authorized to execute the application on a wireless network in a testing capacity, the test permission being associated with the wireless device;

means for requesting the execution of the application on the wireless device;

means for evaluating whether the wireless device includes the test permission; and

if the wireless device includes the test permission, means for executing the application on the wireless device independent of the application including other permissions necessary to execute the application on the wireless device or the wireless network.

21. A computer-readable medium comprising instructions for accessing an application on a wireless device, which, when executed by a computer, causes the computer to perform operations, the instructions comprising:

at least one instruction for receiving, at the wireless device, a test permission that indicates the wireless device is authorized to execute the application on a wireless network in a testing capacity, the test permission being associated with the wireless device;

at least one instruction for requesting the execution of the application on the wireless device;

at least one instruction for evaluating whether the wireless device includes the test permission; and

if the wireless device includes the test permission, at least one instruction for executing the application on the wireless device independent of the application including other permissions necessary to execute the application on the wireless device or the wireless network.