Method and system for automatically configuring access control

• US 7,751,809 B2
• Filed: 05/11/2009
• Issued: 07/06/2010
• Est. Priority Date: 02/26/2004
• Status: Expired due to Term

• Current Assignee: Blackberry Limited
• Original Assignee: Research In Motion Limited (Blackberry Limited)
• Inventors: Owen, Russell, Tyhurst, Timothy R., Adams, Neil
• Primary Examiner(s): Afshar; Kamran
• Application Number:
  US12/463,647
• Publication Number:
  US 20090253424A1
• Time in Patent Office: 421 Days
• Field of Search: 4554141-4142, 455/403, 455/422.1, 455418-420, 455/425, 455/550, 455/556.2, 709/203, 709/229, 709/231, 709/217
• US Class Current: 455/418
• CPC Class Codes: H04L 67/34 involving the movement of software or configuration parameters network booting or remote initial program loading [RIPL] G06F9/4416
• CPC Class Codes: H04L 69/329 in the application layer [OSI layer 7]
• CPC Class Codes: H04M 1/72406 by software upgrading or downloading
• CPC Class Codes: H04W 24/02 Arrangements for optimising operational condition

Abstract

A method for automatically configuring an access control point based upon the network resource requirements of an application. The installation of a new application on a mobile device or other user device is accompanied, before, during, or after installation, with the distribution of access control information. An access control point blocks communications based upon access rules. An access update module modifies or sets the access rules based upon the access control information. The access control point and the access update module may be located within the mobile device, within an associated wireless connector system, or in other locations within the mobile communication system. The setting or resetting of the access rules based upon the access control information may be triggered during installation, modification, or removal of the application.

Claims

1. In an access update module, a method of automatically configuring an access control point, the access control point allowing or blocking transmissions between remote network resources and a new application on a mobile device based upon access rules, the method comprising the steps of:

downloading the new application for installation on the mobile device, wherein the new application is configured to access the remote network resources during operation;

installing the new application on the mobile device;

receiving and reading access control information associated with the new application; and

setting the access control rules based upon said access control information in order to permit communications between the new application and the remote network resources,

wherein downloading comprises downloading an application file to the mobile device, and

wherein setting the access control rules is performed after installation of the application.

2. The method claimed in claim 1, wherein said access control information is embedded within said application file.

3. The method claimed in claim 1, wherein said access control information is stored within a descriptor file associated with said application file, and wherein said step of receiving and reading comprises downloading said descriptor file.

4. The method claimed in claim 3, wherein the application comprises a Java-implemented application, and wherein said descriptor file is a Java Descriptor File.

5. The method claimed in claim 1, wherein said access control information includes an identifier corresponding to the remote network resources.

6. A computer program product having a computer-readable medium tangibly embodying computer executable instructions for automatically configuring an access control point, the access control point allowing or blocking transmissions between remote network resources and an application on a mobile device based upon access rules, wherein the automatic configuration of the access point occurs in connection with downloading and installing the new application on the mobile device, and wherein the new application is configured to access the remote network resources during operation, the computer executable instructions creating an access update module comprising:

computer executable instructions for receiving and reading access control information associated with the application; and

computer executable instructions for setting the access control rules based upon said access control information in order to permit communications between the new application and the remote network resources,

wherein the downloading of the new application includes downloading an application file,

wherein said application file installs the application upon the mobile device, and wherein said computer executable instructions for setting the access control rules execute after installation of the application.

7. The computer program product claimed in claim 6, wherein said access control information is embedded within said application file.

8. The computer program product claimed in claim 6, wherein said access control information is stored within a descriptor file associated with said application file.

9. The computer program product claimed in claim 8, wherein the application comprises a Java-implemented application, and wherein said descriptor file is a Java Descriptor File.

10. The computer program product claimed in claim 6, wherein the application file comprises computer-executable instructions for installing the access update module on the mobile device.

11. The computer program product claimed in claim 6, wherein said access control information includes an identifier corresponding to a said remote network resources.

12. A mobile device having an access control point, the access control point allowing or blocking transmissions between remote network resources and a new application on the mobile device based upon access rules, the user device comprising:

means for downloading the new application for installation on the mobile device, wherein the new application is configured to access the remote network resources during operation;

means for installing the new application on the mobile device;

means for receiving and reading access control information associated with the new application; and

means for setting the access control rules after installation of the application based upon said access control information in order to permit communications between the new application and the remote network resources,

wherein said means for downloading, comprise means for downloading application file to the user device.

13. The user device claimed in claim 12, wherein said access control information is embedded within said application file.

14. The user device claimed in claim 12, wherein said access control information is stored within a descriptor file associated with said application file, and wherein said means for receiving and reading comprises means for downloading said descriptor file.

15. The user device claimed in claim 14, wherein the application comprises a Java-implemented application, and wherein said descriptor file is a Java Descriptor File.

16. The user device claimed in claim 12, wherein said access control information includes an identifier corresponding to the remote network resources.