Method and system for establishing a service relationship between a mobile communication device and a mobile data server for connecting to a wireless network

• US 8,260,273 B2
• Filed: 10/14/2011
• Issued: 09/04/2012
• Est. Priority Date: 05/29/2008
• Status: Active Grant

• Current Assignee: Malikie Innovations Limited (Key Patent Innovations Limited)
• Original Assignee: Blackberry Limited
• Inventors: Tyhurst, Timothy Richard, Omar, Salim Hayder
• Primary Examiner(s): DOAN, PHUOC HUU
• Application Number:
  US13/273,511
• Publication Number:
  US 20120036361A1
• Time in Patent Office: 326 Days
• Field of Search: 370/313, 370/350, 370/324, 455/414.1, 455/418, 713/168, 709/217
• US Class Current: 455/414.1
• CPC Class Codes: H04L 67/34 involving the movement of software or configuration parameters network booting or remote initial program loading [RIPL] G06F9/4416
• CPC Class Codes: H04W 12/04 Key management, e.g. using generic bootstrapping architecture [GBA]
• CPC Class Codes: H04W 12/08 Access security
• CPC Class Codes: H04W 12/35 Protecting application or service provisioning, e.g. securing SIM application provisioning
• CPC Class Codes: H04W 4/50 Service provisioning or reconfiguring
• CPC Class Codes: H04W 8/245 from a network towards a terminal

Abstract

A method and system for establishing a service relationship between a mobile communication device and a mobile data server for connecting to a wireless network are disclosed. In accordance with one embodiment, an Internet browser receives a request to establish a service relationship between a mobile communication device and a mobile data server. A device identifier and device capability data is received from the mobile communication device. Service data for the mobile communication device is received from a mobile data administration server in accordance with the device identifier and device capability data, which is then stored in a memory of the mobile communication device.

Claims

1. A method for establishing service relationships for wireless data communications, the method comprising:

receiving by an Internet browser a first request to establish a service relationship between a mobile communication device and a mobile data server;

receiving a device identifier and device capability data from the mobile communication device in response to the first request;

sending the device identifier and device capability data and a second request to establish the service relationship between the mobile communication device from the Internet browser to a mobile data administration server;

generating the service data for the mobile communication device in accordance with the device identifier and device capability data;

receiving service data for the mobile communication device from the mobile data administration server in response to the second request;

sending the service data from the Internet browser to the mobile communication device; and

storing the service data in a memory of the mobile communication device.

2. The method of claim 1 further comprising:

receiving an acknowledgement message from the mobile communication device when the service data is stored;

sending an acknowledgement message to the mobile data server when the service data is stored; and

commencing service to the mobile communication device when the acknowledgement message is received by the mobile data server.

3. The method of claim 2 further comprising:

changing a status of a private encryption key from a pending state to an active state when the acknowledgement message is received by the mobile data server.

4. The method of claim 1 wherein a scripting-language capable device controller interfaces communications between a scripting engine of the Internet browser and the mobile communication device in accordance with a communications protocol connecting the computer and mobile communication device.

5. The method of claim 4 wherein the Internet browser includes a scripting engine for executing a scripting language, and wherein the first request is received via a user interface element of a web page including a script within the scripting language which is displayed within the Internet browser.

6. The method of claim 1 wherein the generating comprises:

sending the device identifier and device capability data and a third request to establish the service relationship between the mobile communication device from the mobile data administration server to the mobile data server;

generating a private encryption key for the mobile communication device by the mobile data server in accordance with the device identifier and device capability data; and

receiving the private encryption key from the mobile data server to the mobile data administration server in response to the third request.

7. The method of claim 1 wherein the generating comprises:

generating service records in accordance with services specified by a user account profile associated with the device identifier, wherein each service record comprises a service identifier of the mobile data server.

8. The method of claim 7 wherein the service records are generated by the mobile data administration server in accordance with services specified by a user account profile associated with the device identifier, the device capability data and IT policy data associated with the user account profile.

9. The method of claim 1 wherein the service data comprises one or any combination of service records, a private encryption key and IT policy data.

10. A data processing system, comprising:

a processor;

a data interface coupled to the processor and configured for communicating with a mobile communication device and for exchanging data with the mobile communication device through a communications protocol;

a communications subsystem coupled to the processor;

a module for receiving by an Internet browser a first request to establish a service relationship between a mobile communication device and a mobile data server;

a module for receiving a device identifier and device capability data from the mobile communication device in response to the first request;

a module for sending the device identifier and device capability data and a second request to establish the service relationship between the mobile communication device from the Internet browser to a mobile data administration server;

a module for receiving by service data for the mobile communication device from the mobile data administration server in response to the second request;

a module for generating the service data for the mobile communication device in accordance with the device identifier and device capability data;

a module for sending the service data from the Internet browser to the mobile communication device; and

a module for storing the service data in a memory of the mobile communication device.

11. A method for establishing service relationships for connecting to a wireless network, the method comprising:

receiving by a mobile data administration server a device identifier and device capability data about a mobile communication device connected to the computer via a communications network connecting the mobile data administration server to the computer;

generating service data for the mobile communication device in accordance with the device identifier and device capability data, wherein the generating comprises generating service records in accordance with services specified by a user account profile associated with the device identifier, wherein each service record comprises a service identifier of the mobile data server;

sending the service data to the computer via the communications network;

commencing service to the mobile communication device when an acknowledgement message that the service data has been stored on the mobile communication device is received by the mobile data server.

12. The method of claim 11 wherein the generating comprises generating a private encryption key for the mobile communication device, the method further comprising changing a status of the private encryption key from a pending state to an active state when the acknowledgement message is received by the mobile data server.

13. The method of claim 11 wherein the service records are generated in accordance with services specified by a user account profile associated with the device identifier, the device capability data and IT policy data associated with the user account profile.

14. The method of claim 11 wherein the service data comprises one or any combination of service records, a private encryption key and IT policy data associated with the user account profile.

15. A server for establishing a service relationship between a mobile communication device and a mobile data server for connecting to a wireless network, wherein the mobile communication device is connected to a computer through a communications protocol, the server comprising:

a module for receiving by a mobile data administration server a device identifier and device capability data about a mobile communication device connected to the computer via a communications network connecting the mobile data administration server to the computer;

a module for generating service data for the mobile communication device in accordance with the device identifier and device capability data, wherein the module for generating service data is configured to generate service records in accordance with services specified by a user account profile associated with the device identifier, wherein each service record comprises a service identifier of the mobile data server;

a module for sending the service data to the computer via the communications network; and

a module for commencing service to the mobile communication device when an acknowledgement message that the service data has been stored on the mobile communication device is received by the server.

16. The server of claim 15 wherein the module for generating service data is configured to generate a private encryption key for the mobile communication device.

17. The server of claim 15 wherein the module for generating service data is configured to generate the service records in accordance with services specified by a user account profile associated with the device identifier, the device capability data and IT policy data associated with the user account profile.

18. The server of claim 15 wherein the service data generated by the module for generating service data comprises one or any combination of service records, a private encryption key and IT policy data associated with the user account profile.