Certificate information storage system and method

• US 9,807,082 B2
• Filed: 03/09/2011
• Issued: 10/31/2017
• Est. Priority Date: 03/20/2002
• Status: Active Grant

• Current Assignee: Malikie Innovations Limited (Key Patent Innovations Limited)
• Original Assignee: Blackberry Limited
• Inventors: Adams, Neil P., Little, Herbert A., Kirkup, Michael G.
• Primary Examiner(s): Agwumezie, Charles C
• Application Number:
  US13/043,859
• Publication Number:
  US 20110271115A1
• Time in Patent Office: 2,428 Days
• Field of Search: 705 51
• CPC Class Codes: G06F 21/606 by securing the transmission between two devices or processes
• CPC Class Codes: H04L 63/0823 using certificates cryptographic mechanisms or cryptographic arrangements for entity authentication involving certificates H04L9/3263

Abstract

A system and method of storing in a computer device digital certificate data from a digital certificate are provided. When a digital certificate is received at the computer device, it is determined whether the digital certificate data in the digital certificate is stored in a first memory store in the computer device. The digital certificate data is stored in the first memory store upon determining that the digital certificate data is not stored in the first memory store.

Claims

1. A method performed by a wireless mobile communication device for flagging address book entries, the method comprising:

receiving, by the wireless mobile communication device, a digital certificate;

extracting, by the wireless mobile communication device, a set of contact information from the digital certificate associated with a sender of the digital certificate;

analyzing, based on the set of contact information, a set of address book entries of an address book stored in a memory of the wireless mobile communication device, wherein each of the set of address book entries comprises contact information associated with a given entity;

determining, by the wireless mobile communication device, whether digital certificate information associated with the digital certificate is already stored in at least one of the set of an address book entries based on analyzing the set of address book entries; and

storing, by the wireless mobile communication device, the digital certificate information in the address book in association with an address book entry corresponding to the received digital certificate and setting a secure message flag within the address book entry corresponding to the received digital certificate, based on determination that the received digital certificate information is not already stored in the memory of the wireless mobile communication device, wherein the secure message flag indicates that a corresponding digital certificate is stored for a contact of the address book entry.

2. The method of claim 1, further comprising:

setting the secure message flag for the address book entry corresponding to the received digital certificate when it is determined that both (1) the received digital certificate information is already stored in association with the address book entry in the memory, and (2) the secure message flag is not set.

3. The method of claim 1, further comprising:

creating the address book entry corresponding to the received digital certificate prior to the storing of the digital certificate information in association with the address book entry.

4. The method of claim 1, wherein the digital certificate information comprises a digital certificate.

5. The method of claim 1, further comprising:

extracting the digital certificate information from a digital certificate.

6. The method of claim 1, further comprising:

setting a default send flag, the default flag indicating that messages addressed to a contact for the address book entry are to be sent in a default manner.

7. The method of claim 4, further comprising using the digital certificate to send secure messages to a contact of the address book entry.

8. A method performed by a client wireless mobile communication device, the method comprising:

obtaining a message addressed to a recipient;

determining whether a secure message flag of an address book entry associated with the recipient is set, the secure message flag indicating whether digital certificate information associated with the recipient is stored in a memory of the wireless mobile communication device, the address book entry stored in an address book in the memory of the wireless mobile communication device, to determine whether the digital certificate information associated with the recipient is stored in the memory of the wireless mobile communication device; and

performing a security operation prior to sending the message, based on determination that the secure message flag is set.

9. The method of claim 8, further comprising:

sending a request to a digital certificate provider for a digital certificate for the recipient when it is determined that the secure message flag of the address book entry associated with the recipient is not set.

10. The method of claim 8, further comprising aborting the messaging operation or sending the message in the clear, when it is determined that the secure message flag of the address book entry is not set.

11. The method of claim 8, wherein performing the security operation comprises determining if a default send flag has been set, when it is determined that the secure message flag of the address book entry is set.

12. The method of claim 8, further comprising:

setting a default send flag.

13. The method of claim 8, wherein performing the security operation comprises sending the message using a digital certificate stored in association with the recipient, when it is determined that the secure message flag of the address book entry is set.

14. The method of claim 8, wherein performing the security operation comprises:

presenting options for sending the message;

receiving an input selecting one of the options; and

sending the message in accordance with the selected option.

15. The method of claim 9, further comprising:

receiving the digital certificate including the digital certificate information;

storing the digital certificate information in the memory; and

setting the secure message flag in the address book for the address book entry associated with the recipient.

16. The method of claim 11, further comprising:

sending the message in accordance with the default send flag, when it is determined that the default send flag has been set.

17. The method of claim 15, further comprising:

sending the message using the digital certificate information.

18. The method of claim 14, wherein one of the options comprises sending the message using the digital certificate.

19. A non-transitory computer readable medium having computer readable instructions stored thereon that when executed cause a processor of a wireless mobile communication device:

receive a digital certificate;

extract a set of contact information from the digital certificate associated with a sender of the digital certificate;

analyze, based on the set of contact information, a set of address book entries of an address book stored in a memory of the wireless mobile communication device, wherein each of the set of address book entries comprises contact information associated with a given entity;

determine whether received digital certificate information associated with the digital certificate is already stored in at least one of the set of an address book based on analyzing the set of address book entries; and

store, a wireless mobile communication device, the digital certificate information in the address book in association with an address book entry corresponding to the received digital certificate, and set a secure message flag within the address book entry corresponding to the received digital certificate, based on determination that the received digital certificate information is not already stored in association with the address book entry in the memory of the wireless mobile communication device, wherein the secure message flag indicates that a corresponding digital certificate is stored for a contact of the address book entry.

20. A non-transitory computer readable medium having computer readable instructions stored thereon that when executed cause a processor to:

obtain a message addressed to a recipient;

determine whether a secure message flag of an address book entry associated with the recipient is set, the secure message flag indicating whether digital certificate information associated with the recipient is stored in a memory of the a wireless mobile communication device, the address book entry stored in an address book in the memory of the wireless mobile communication device, to determine whether the digital certificate information associated with the recipient is stored in the memory of the wireless mobile communication device; and

perform a security operation prior to sending the message, based on determination that the secure message flag is set.

21. A wireless mobile communication device for flagging address book entries, the device comprising:

a processor configured to;

receive a digital certificate;

extract, a set of contact information from the digital certificate associated with a sender of the digital certificate;

analyze, based on the set of contact information, a set of address book entries of an address book stored in a memory of the wireless mobile communication device, wherein each of the set of address book entries comprises contact information associated with a given entity;

determine whether digital certificate information received by the wireless mobile communication device is already stored in an address book comprising contact information in a memory of the wireless mobile communication device, and

store, by a wireless mobile communication device, the digital certificate information in the address book in association with an address book entry corresponding to the received digital certificate and set a secure message flag in the address book entry corresponding to the received digital certificate, based on determination that the received digital certificate information is not already stored in the memory of the wireless mobile communication device.

22. The wireless mobile communication device of claim 21, wherein the processor is further configured to set the secure message flag for the address book entry corresponding to the received digital certificate when the processor determines that both the received digital certificate information is already stored in association with the address book entry in the memory, and the secure message flag is not set.

23. The wireless mobile communication device of claim 21, wherein the processor is further configured to create the address book entry corresponding to the received digital certificate prior to storing of the digital certificate information in association with the address book entry.

24. The wireless mobile communication device of claim 21, wherein the processor is further configured to extract the digital certificate information from a digital certificate.

25. The wireless mobile communication device of claim 21, wherein the processor is further configured to set a default send flag, the default send flag indicating that messages addressed to a contact for the address book entry are to be sent in a default manner.

26. The wireless mobile communication device of claim 23, wherein the processor is further configured to use the digital certificate to send secure messages to a contact of the address book entry.

27. A wireless mobile communication device, comprising:

a processor configured to obtain a message addressed to a recipient, determine whether a secure message flag of an address book entry associated with the recipient is set, the secure message flag indicating whether digital certificate information associated with the recipient is stored in a memory of the wireless mobile communication device, the address book entry stored in an address book in memory of the wireless mobile communication device, to determine whether the digital certificate information associated with the recipient is stored in the memory of the wireless mobile communication device, and

perform a security operation prior to sending the message, based on determination that the secure message flag is set.