System and method of installing software applications on electronic devices

• US 8,429,410 B2
• Filed: 07/02/2010
• Issued: 04/23/2013
• Est. Priority Date: 02/21/2003
• Status: Active Grant

• Current Assignee: Malikie Innovations Limited (Key Patent Innovations Limited)
• Original Assignee: Research In Motion Limited (Blackberry Limited)
• Inventors: Little, Herbert Anthony, Owen, Russell Norman, Adams, Neil Patrick, Brown, Michael Stephen, Clark, David, Totzke, Scott William
• Primary Examiner(s): Cervetti, David Garcia
• Application Number:
  US12/829,555
• Publication Number:
  US 20100275029A1
• Time in Patent Office: 1,026 Days
• Field of Search: 713/175, 713/176, 717/174
• US Class Current: 713/175
• CPC Class Codes: G06F 21/62 Protecting access to data via a platform, e.g. using keys or access control rules
• CPC Class Codes: G06F 21/6218 to a system of files or objects, e.g. local or distributed file system or database
• CPC Class Codes: G06F 21/64 Protecting data integrity, e.g. using checksums, certificates or signatures
• CPC Class Codes: G06F 21/71 to assure secure computing or processing of information
• CPC Class Codes: G06F 2221/2105 Dual mode as a secondary aspect
• CPC Class Codes: G06F 2221/2113 Multi-level security, e.g. mandatory access control
• CPC Class Codes: G06F 2221/2143 Clearing memory, e.g. to prevent the data from being stolen
• CPC Class Codes: G06F 2221/2149 Restricted operating environment
• CPC Class Codes: G06F 2221/2153 Using hardware token as a secondary aspect

Abstract

In at least one embodiment, there is provided a mobile wireless device comprising: a microprocessor and memory, the memory comprising a set of control settings used to control a plurality of device operations; wherein the microprocessor is configured to: receive a first digital signature key for verifying digital signatures on software applications to be installed on the device; determine if any digital signature keys for verifying digital signatures on software applications to be installed on the device exist on the device, and if not, store the received first digital signature key in the memory; receive a software application for installation on the device; verify a digital signature on the received software application using the first digital signature key; and install the software application on the device if the digital signature on the received software application is successfully verified.

Claims

1. A mobile wireless device comprising:

a microprocessor and memory, the memory comprising a set of control settings used to control a plurality of device operations;

wherein the microprocessor is configured to;

receive a first digital signature key for verifying digital signatures on software applications to be installed on the device;

determine if any digital signature keys for verifying digital signatures on software applications to be installed on the device exist on the device, and if not, store the received first digital signature key in the memory;

receive a software application for installation on the device;

verify a digital signature on the received software application using the first digital signature key; and

install the software application on the device if the digital signature on the received software application is successfully verified;

receive a new digital signature key for verifying digital signatures on software applications to be installed on the device;

verify a digital signature on the received new digital signature key using the first digital signature key; and

store the new digital signature key in the memory to replace the first digital signature key if the digital signature on the received new digital signature key is successfully verified.

2. The device of claim 1, further comprising a second digital signature key stored in the memory, where the second digital signature key is different from the first digital signature key and where the second digital signature key is useable for verifying the authenticity of the control settings used to control a plurality of device operations.

3. The device of claim 1, wherein the microprocessor is configured to receive the new digital signature key wirelessly, via an interface on the device.

4. The device of claim 1, wherein the microprocessor is further configured to:

receive a targeted recovery application that searches for the first digital signature key, and a new digital signature key; and

execute the targeted recovery application that searches for the first digital signature key, wherein the first digital signature key is replaced with the new digital signature key if the first digital signature key is found.

5. The device of claim 4, wherein the microprocessor is configured to receive the targeted recovery application that searches for the first digital signature key wirelessly, via an interface on the device.

6. The device of claim 4, wherein a device manufacturer key is stored on the device, and wherein the microprocessor is further configured to:

verify a digital signature on the received targeted recovery application that searches for the first digital signature key using the device manufacturer key; and

perform execution of the targeted recovery application that searches for the first digital signature key only if the digital signature on the received targeted recovery application that searches for the first digital signature key is successfully verified.

7. The device of claim 1, wherein the microprocessor is configured to receive at least one of the first digital signature key and the software application wirelessly, via an interface on the device.

8. The device of claim 1, wherein the microprocessor is configured to:

determine whether the received software application is current by comparing a version number of the received software application to a version number of a previously installed software application;

wherein the received software application is installed if the digital signature on the received software application is successfully verified and if the received software application is determined to be current.

9. The device of claim 1, wherein installations of software applications on the device are prevented until the first digital signature key is stored in the memory.

10. A method of controlling a mobile wireless device that comprises a microprocessor and memory, wherein the method comprises:

receiving a first digital signature key for verifying digital signatures on software applications to be installed on the device;

determining if any digital signature keys for verifying digital signatures on software applications to be installed on the device exist on the device, and if not, storing the received first digital signature key in the memory;

receiving a software application for installation on the device;

verifying a digital signature on the received software application using the first digital signature key; and

installing the software application on the device if the digital signature on the received software application is successfully verified;

receiving a new digital signature key for verifying digital signatures on software applications to be installed on the device;

verifying a digital signature on the received new digital signature key using the first digital signature key; and

storing the new digital signature key in the memory to replace the first digital signature key if the digital signature on the received new digital signature key is successfully verified.

11. The method of claim 10, wherein a second digital signature key is stored in the memory, wherein the second digital signature key is different from the first digital signature key, and wherein the second digital signature key is for verifying digital signatures on information other than software applications being inserted onto the device.

12. The method of claim 10, further comprising receiving the new digital signature key wirelessly, via an interface on the device.

13. The method of claim 10, further comprising:

receiving a targeted recovery application that searches for the first digital signature key, and a new digital signature key; and

executing the targeted recovery application that searches for the first digital signature key, wherein the first digital signature key is replaced with the new digital signature key if the first digital signature key is found.

14. The method of claim 13, further comprising receiving the targeted recovery application that searches for the first digital signature key wirelessly, via an interface on the device.

15. The method of claim 13, wherein a device manufacturer key is stored on the device, and wherein the method further comprises:

verifying a digital signature on the received targeted recovery application that searches for the first digital signature key using the device manufacturer key; and

executing the targeted recovery application that searches for the first digital signature key only if the digital signature on the received targeted recovery application that searches for the first digital signature key is successfully verified.

16. The method of claim 10, further comprising receiving at least one of the first digital signature key and the software application wirelessly, via an interface on the device.

17. The method of claim 10, further comprising:

determining whether the received software application is current by comparing a version number of the received software application to a version number of a previously installed software application;

wherein the received software application is installed if the digital signature on the received software application is successfully verified and if the received software application is determined to be current.

18. The method of claim 10, wherein installations of software applications on the device are prevented until the first digital signature key is stored in the memory.

19. A non-transitory computer-readable medium storing instructions executable by a microprocessor which when executed cause the processor to carry out a method comprising:

receiving a first digital signature key for verifying digital signatures on software applications to be installed on the device;

determining if any digital signature keys for verifying digital signatures on software applications to be installed on the device exist on the device, and if not, storing the received first digital signature key in the memory;

receiving a software application for installation on the device;

verifying a digital signature on the received software application using the first digital signature key; and

installing the software application on the device if the digital signature on the received software application is successfully verified;

receiving a new digital signature key for verifying digital signatures on software applications to be installed on the device;

verifying a digital signature on the received new digital signature key using the first digital signature key; and

storing the new digital signature key in the memory to replace the first digital signature key if the digital signature on the received new digital signature key is successfully verified.