Apparatus for restricting access to application module in mobile wireless device and method of restricting access to application module using the same

• US 8,225,393 B2
• Filed: 08/21/2006
• Issued: 07/17/2012
• Est. Priority Date: 04/03/2006
• Status: Expired due to Fees

• Current Assignee: Samsung Electronics Co. Ltd.
• Original Assignee: Samsung Electronics Co. Ltd.
• Inventors: Park, Tae Joon, Jung, Tae-Chul
• Primary Examiner(s): Arani, Taghi
• Assistant Examiner(s): VICTORIA, NARCISO F
• Application Number:
  US11/506,924
• Publication Number:
  US 20070232268A1
• Time in Patent Office: 2,157 Days
• Field of Search: 455/411, 726/22
• US Class Current: 726/22
• CPC Class Codes: G06F 21/629 to features or functions of an application
• CPC Class Codes: H04M 1/66 with means for preventing unauthorised or fraudulent calling verifying user identity or authority in secret or secure digital communications H04L9/32
• CPC Class Codes: H04M 1/72403 with means for local support of applications that increase the functionality
• CPC Class Codes: H04M 1/7243 with interactive means for internal management of messages
• CPC Class Codes: H04M 2250/02 including a Bluetooth interface

Abstract

Provided is an apparatus and a method of restricting an access to an application module of a mobile wireless device. The apparatus for restricting an access to an application module of a mobile wireless device according to an exemplary embodiment of the present invention includes an access restriction unit for receiving a request for an access to an application module from a basic module, and for restricting the access of the basic module to the application module when a restriction on the access is required. Further included is an access restriction determination unit for determining whether the restriction on the access of the basic module to the application module according to an access environment is required. Also included is an access environment determination unit for monitoring the access environment of the basic module to the application module and for providing the access restriction determination unit with a result of monitoring the access environment.

Claims

1. An apparatus for restricting an access to an application module of a mobile wireless device, the mobile wireless device usable by a plurality of users, the apparatus comprising:

an access restriction unit configured to;

receive a request for an access to an application module from a basic module; and

restrict the access of the basic module to the application module in response to a restriction on the access being required;

an access restriction determination unit configured to determine whether the restriction on the access of the basic module to the application module is required based on an access environment, the access environment comprising information about whether a current user of the mobile wireless device subscribes to a service with respect to the application module; and

an access environment determination unit configured to;

monitor the access environment of the basic module to the application module; and

provide the access restriction determination unit with a result of the monitoring of the access environment;

wherein the access restriction determination unit comprises;

an access restriction list configured to store information about whether the access of the basic module to at least one application module is allowed;

a list updating unit configured to update the access restriction list; and

an integrity verification unit configured to verify an integrity of at least one of;

the basic module configured to make an access request to the application module; and

software configured to make the access request through the basic module; and

the list updating unit is further configured to update the access restriction list according to a result of a verification of the integrity verification unit.

2. The apparatus of claim 1, wherein the access environment determination unit is further configured to monitor at least one of a malignant code proliferation environment and a service subscription environment of the current user.

3. The apparatus of claim 2, wherein the access environment determination unit comprises a malignant code proliferation determination unit configured to monitor a malignant code proliferation via at least one of the basic module and the application module.

4. The apparatus of claim 2, wherein the access environment determination unit comprises a service subscription determination unit configured to monitor whether the current user of the mobile wireless device subscribes to the service with respect to the application module.

5. The apparatus of claim 2, wherein the access environment determination unit comprises a remote control unit configured to:

authenticate a network management unit by wirelessly communicating with the network management unit in a remote location; and

control the network management unit to remotely control the access restriction determination unit.

6. The apparatus of claim 1, wherein the access restriction unit is further configured to:

receive a first identifier with respect to the application module attempting to be accessed by the basic module; and

provide a second identifier capable of accessing the application module only in response to the restriction on the access being not required.

7. The apparatus of claim 1, wherein the access restriction determination unit comprises:

an access restriction list configured to store information about whether an access of the basic module to at least one application module is allowed; and

a list updating unit configured to update the access restriction list according to the access environment.

8. The apparatus of claim 1, wherein the access restriction determination unit comprises an integrity verification unit configured to verify an integrity of at least one of:

the basic module configured to make an access request to the application module; and

software configured to make the access request through the basic module.

9. The apparatus of claim 8, wherein the integrity verification unit is further configured to verify the integrity in response to a request from at least one of the access restriction unit and the access environment determination unit.

10. The apparatus of claim 1, wherein the integrity verification unit is further configured to verify the integrity in response to the request from at least one of the list updating unit and the access environment determination unit.

11. The apparatus of claim 1, wherein the access restriction determination unit is further configured to:

receive user information related to the current user, corresponding to the request for the access; and

determine whether the restriction on the access is required according to the user information.

12. The apparatus of claim 1, wherein the apparatus for restricting the access to the application module of the mobile wireless device is protected by a tamper-resistant hardware.

13. A method of restricting an access to an application module of a mobile wireless device, the mobile wireless device usable by a plurality of users, the method comprising:

monitoring an access environment of a basic module to an application module;

determining, by an access restriction determination unit, whether a restriction on an access of the basic module to the application module is required according to a result of monitoring the access environment, the access environment comprising information about whether a current user of the mobile wireless device subscribes to a service with respect to the application module; and

restricting the access of the basic module to the application module with respect to a request for an access of the basic module to the application module, in response to the restriction on the access being determined to be required;

wherein the access restriction determination unit comprises;

an access restriction list configured to store information about whether the access of the basic module to at least one application module is allowed;

a list updating unit configured to update the access restriction list; and

an integrity verification unit configured to verify an integrity of at least one of;

the basic module configured to make an access request to the application module; and

software configured to make the access request through the basic module; and

the list updating unit is further configured to update the access restriction list according to a result of a verification of the integrity verification unit.

14. The method of claim 13, wherein the access environment comprises at least one of a malignant code proliferation environment and a service subscription environment of the current user.

15. The method of claim 14, wherein the malignant code proliferation environment comprises information about whether a malignant code proliferates via at least one of the basic module and the application module.

16. The method of claim 14, wherein the service subscription environment comprises information about whether the current user of the mobile wireless device subscribes to the service with respect to the application module.

17. The method of claim 14, wherein the monitoring of the access environment comprises:

authenticating a network management unit by wirelessly communicating with the network management unit in a remote location; and

being provided information about the access environment from the authenticated network management unit.

18. The method of claim 13, wherein the restricting of the access of the basic module comprises:

receiving a first identifier with respect to the application module attempting to be accessed by the basic module; and

providing a second identifier capable of accessing the application module only in response to the restriction on the access being not required.

19. The method of claim 13, wherein the determining of the restriction on the access comprises determining whether the restriction on the access is required by using an access restriction list storing information about whether an access of the basic module to at least one application module is allowed, the access restriction list being updated according to the access environment.

20. The method of claim 13, wherein the determining of the restriction on the access comprises:

verifying an integrity of at least one of;

the basic module which makes the access request to the application module; and

software which makes the access request through the basic module; and

determining whether the restriction on the access is required according to a result of the verification.

21. The method of claim 13, wherein the determining of the restriction on the access comprises determining whether the restriction on the access is required by using an access restriction list for storing information about whether the access of the basic module to at least one application module is allowed, the access restriction list being updated according to a result of verifying the integrity of at least one of:

the basic module which makes the access request to the application module; and

the software which makes the access request through the basic module.

22. The method of claim 13, wherein the determining of the restriction on the access:

utilizes user information related to the current user, corresponding to the request for the access; and

determines whether the restriction on the access is required according to the user information.

23. A non-transitory computer-readable recording medium storing a program for implementing the method of restricting an access to an application module of a mobile wireless device, the mobile wireless device usable by a plurality of users, the method comprising:

monitoring an access environment of a basic module to an application module;

determining, by an access restriction determination unit, whether a restriction on an access to the application module of the basic module is required according to a result of monitoring the access environment, the access environment comprising information about whether a current user of the mobile wireless device subscribes to a service with respect to the application module; and

restricting the access to the application module of the basic module with respect to a request for an access to the application module of the basic module, in response to the restriction on the access being determined to be required;

wherein the access restriction determination unit comprises;

an access restriction list configured to store information about whether the access of the basic module to at least one application module is allowed;

a list updating unit configured to update the access restriction list; and

an integrity verification unit configured to verify an integrity of at least one of;

the basic module configured to make an access request to the application module; and

software configured to make the access request through the basic module; and

the list updating unit is further configured to update the access restriction list according to a result of a verification of the integrity verification unit.

24. An apparatus for restricting an access to an application module of a mobile wireless device, the mobile device usable by a plurality of users, the apparatus comprising:

a means for receiving a request for an access to an application module from a basic module, and restricting the access of the basic module to the application module in response to a restriction on the access being required;

a means for determining whether the restriction on the access of the basic module to the application module is required, according to a result of a monitoring of an access environment, the access environment comprising information about whether a current user of the mobile wireless device subscribes to a service with respect to the application module; and

a means for monitoring the access environment of the basic module to the application module and for generating the result of the monitoring of the access environment;

wherein the means for determining whether the restriction on the access of the basic module to the application module is required comprises;

an access restriction list configured to store information about whether the access of the basic module to at least one application module is allowed;

a list updating unit configured to update the access restriction list; and

an integrity verification unit configured to verify an integrity of at least one of;

the basic module configured to make an access request to the application module; and

software configured to make the access request through the basic module; and

the list updating unit is further configured to update the access restriction list according to a result of a verification of the integrity verification unit.