System and method for processing encoded messages for exchange with a mobile data communication device

• US 7,653,815 B2
• Filed: 06/12/2002
• Issued: 01/26/2010
• Est. Priority Date: 06/12/2001
• Status: Active Grant

• Current Assignee: Malikie Innovations Limited (Key Patent Innovations Limited)
• Original Assignee: Blackberry Limited
• Inventors: Godfrey, James A., Little, Herbert A.
• Primary Examiner(s): Parthasarathy; Pramila
• Application Number:
  US10/480,514
• Publication Number:
  US 20040196978A1
• Time in Patent Office: 2,785 Days
• Field of Search: None
• US Class Current: 713/176
• CPC Class Codes: G06Q 10/107 Computer-aided management of electronic mailing [e-mailing]
• CPC Class Codes: H04L 12/189 in combination with wireless systems selective distribution or broadcast in wireless communication networks H04W4/06
• CPC Class Codes: H04L 51/066 Format adaptation, e.g. format conversion or compression
• CPC Class Codes: H04L 51/58 Message adaptation for wireless communication
• CPC Class Codes: H04L 63/0428 wherein the data content is protected, e.g. by encrypting or encapsulating the payload
• CPC Class Codes: H04L 63/0442 wherein the sending and receiving network entities apply asymmetric encryption, i.e. different keys for encryption and decryption cryptographic mechanisms or cryptographic arrangements for public-key encryption H04L9/30
• CPC Class Codes: H04L 63/062 for key distribution, e.g. centrally by trusted party cryptographic mechanisms or cryptographic arrangements for key distribution involving a central third party H04L9/0819
• CPC Class Codes: H04L 63/0823 using certificates cryptographic mechanisms or cryptographic arrangements for entity authentication involving certificates H04L9/3263
• CPC Class Codes: H04L 63/101 Access control lists [ACL]
• CPC Class Codes: H04L 63/126 the source of the received data
• CPC Class Codes: H04L 67/04 specially adapted for terminals or networks with limited capabilities; specially adapted for terminal portability
• CPC Class Codes: H04L 67/565 Conversion or adaptation of application format or content adding application control or application functional data H04L67/561
• CPC Class Codes: H04L 67/5651 Reducing the amount or size of exchanged application data
• CPC Class Codes: H04L 69/329 in the application layer [OSI layer 7]
• CPC Class Codes: H04L 9/3247 involving digital signatures
• CPC Class Codes: H04W 12/02 Protecting privacy or anonymity, e.g. protecting personally identifiable information [PII]
• CPC Class Codes: H04W 12/033 of the user plane, e.g. user's traffic
• CPC Class Codes: H04W 12/04 Key management, e.g. using generic bootstrapping architecture [GBA]
• CPC Class Codes: H04W 12/06 Authentication
• CPC Class Codes: H04W 24/02 Arrangements for optimising operational condition
• CPC Class Codes: H04W 4/16 : Communication-related supplementary services, e.g. call-transfer or call-hold
• CPC Class Codes: H04W 40/02 : Communication route or path selection, e.g. power-based or shortest path routing

Abstract

A system and method are provided for pre-processing encrypted and/or signed messages at a host system before the message is transmitted to a wireless mobile communication device. The message is received at the host system from a message sender. There is a determination as to whether any of the message receivers has a corresponding wireless mobile communication device. For each message receiver that has a corresponding wireless mobile communication device, the message is processed so as to modify the message with respect to one or more encryption and/or authentication aspects. The processed message is transmitted to a wireless mobile communication device that corresponds to the first message receiver. The system and method may include post-processing messages sent from a wireless mobile communications device to a host system. Authentication and/or encryption message processing is performed upon the message. The processed message may then be sent through the host system to one or more receivers.

Claims

1. A method of processing an encoded message at a host system, the method comprising the steps of:

receiving at the host system the encoded message from a message sender, wherein the encoded message is addressed to a plurality of message receivers and has one or more encryption aspects;

determining at the host system whether any of the message receivers has a corresponding wireless mobile communication device; and

for each message receiver that has a corresponding wireless mobile communication device;

processing at the host system the encoded message so as to remove at least one encryption aspect of the encoded message;

wherein the at least one removed encryption aspect comprises an encryption-related key;

wherein the encryption-related key comprises a session key;

wherein the step of processing comprises the step of removing the session key that is unrelated to the wireless mobile communication device to which the processed encoded message is to be transmitted; and

transmitting by the host system the processed encoded message to the corresponding wireless mobile communication device.

2. The method of claim 1, wherein the encoded message from the message sender comprises an S/MIME (Secure Multipurpose Internet Mail Extensions) encrypted message.

3. The method of claim 1, wherein the encoded message from the message sender comprises a PGP (Pretty Good Privacy) encrypted message.

4. The method of claim 1 wherein the step of processing further comprises removing a RecipientInfo list from the encoded message.

5. The method of claim 1, wherein the processed encoded message comprises a new message that has been generated from the encoded message based upon at least one encryption aspect.

6. The method of claim 1, wherein:

the step of processing comprises decrypting the encoded message; and

the decrypted message is used to generate the processed encoded message that is to be transmitted to the wireless mobile communication device.

7. The method of claim 1, wherein:

the encoded message includes an encrypted session key for each of the plurality of message receivers; and

the method further comprises the steps of, for each message receiver that has a corresponding wireless mobile communication device;

generating an intermediary message for the wireless mobile communication device with only the encrypted session key for the corresponding wireless mobile communication device;

transmitting the intermediary message to the wireless mobile communication device so that the session key may be decrypted at the wireless mobile communication device and transmitted to the host system, wherein the decrypted session key is received by the host system;

decrypting the encoded message using the decrypted session key; and

transmitting the decrypted encoded message to the wireless mobile communication device.

8. The method of claim 1, wherein:

the encoded message from the message sender comprises an encrypted message body; and

the processed encoded message sent to the wireless mobile communications device comprises substantially the entire encrypted message body.

9. The method of claim 1, wherein redirection means is used in said determining step.

10. A host system that includes software instructions encoded on a computer-readable medium or mediums for processing an encoded message, the host system comprising:

software instructions that operate on a processor and that receive the encoded message from a message sender, wherein the encoded message is addressed to a plurality of message receivers and has one or more encryption aspects;

software instructions that operate on the processor and that determine whether any of the message receivers has a corresponding wireless mobile communication device; and

software instructions that operate on the processor and that, for each message receiver that has a corresponding wireless mobile communication device, process the encoded message so as to remove at least one encryption aspect of the encoded message and transmit the processed encoded message to the corresponding wireless mobile communication device;

wherein the at least one removed encryption aspect comprises an encryption-related key;

wherein the encryption-related key comprises a session key;

wherein the encoded message is processed so as to remove the session key that is unrelated to the wireless mobile communication device to which the processed encoded message is to be transmitted.

11. Computer-readable storage medium or mediums encoded with instructions that cause a processor to perform a method for processing an encoded message at a host system, said method comprising:

receiving at the host system the encoded message from a message sender, wherein the encoded message is addressed to a plurality of message receivers and has one or more encryption aspects;

determining at the host system whether any of the message receivers has a corresponding wireless mobile communication device; and

for each message receiver that has a corresponding wireless mobile communication device;

processing at the host system the encoded message so as to remove at least one encryption aspect of the encoded message;

wherein the at least one removed encryption aspect comprises an encryption-related key;

wherein the encryption-related key comprises a session key;

wherein the step of processing comprises the step of removing the session key that is unrelated to the wireless mobile communication device to which the processed encoded message is to be transmitted; and

transmitting by the host system the processed encoded message to the corresponding wireless mobile communication device.