ACCESS CONTROL SYSTEM AND METHOD FOR WIRELESS APPLICATION PROVISIONING

• US 20110072044A1
• Filed: 12/01/2010
• Published: 03/24/2011
• Est. Priority Date: 10/03/2006
• Status: Active Grant

• Current Assignee: Malikie Innovations Limited (Key Patent Innovations Limited)
• Original Assignee: Blackberry Limited
• Inventors: Shenfield, Michael, Bibr, Viera, Fritsch, Brindusa
• Granted Patent: US 8,122,130 B2
• Time in Patent Office: Days
• US Class Current: 707/769
• CPC Class Codes: H04L 63/102 Entity profiles
• CPC Class Codes: H04L 67/04 specially adapted for terminals or networks with limited capabilities; specially adapted for terminal portability
• CPC Class Codes: H04W 12/08 Access security
• CPC Class Codes: H04W 12/35 Protecting application or service provisioning, e.g. securing SIM application provisioning
• CPC Class Codes: H04W 88/02 Terminal devices

Abstract

A method for controlling access to content on a network, the method comprising the steps of associating access credentials with content to be published for download receiving a content download request from a mobile device, the content download request including access information, matching the received access information with the published content access credentials to permit access to the published content and allowing the permitted content to be downloaded by the mobile device.

Claims

1. A mobile device for accessing published content on a network, the mobile device comprising:

a memory for storing access information including role data identifying one or more user roles assigned to the mobile device, the access information being pushed to the mobile device;

a discovery agent for;

sending a user search request and the access information to a content registry; and

receiving a search result from the content registry, the search result including a list of published content having an access credential matching the access information, the access credential being associated with the published content; and

a retrieving module for sending a user selection based on the search result and for downloading the published content associated with the user selection.

2. The mobile device according to claim 1, further comprising:

a runtime environment hosting the discovery agent and the retrieving module.

3. The mobile device according to claim 1, wherein the network comprises:

a discovery service for receiving the user search request from the discovery agent, searching the content registry and sending the search result to the discovery agent; and

a retrieving service for receiving the user selection from the retrieving module and for sending the user selection to the retrieving module.

4. The mobile device according to claim 1, wherein the access information is part of a service book.

5. The mobile device according to claim 1, wherein the access information is pushed to the mobile device during initialization of the mobile device.

6. The mobile device according to claim 1, wherein the access information stored in the memory is updated by the network when the access information is updated, the updated access information being pushed to the mobile device.

7. The mobile device according to claim 1, wherein the access information stored in the memory is uneditable by a user or invisible to the user.

8. The mobile device according to claim 1, wherein the access information is encrypted.

10. The mobile device according to claim 1, wherein the published content is stored in a content repository.

11. The mobile device according to claim 10, wherein the content repository and the content registry are stored in a repository.

12. The mobile device according to claim 1, wherein the content registry comprises:

descriptors for the published content; and

the access credential.

13. A method for accessing published content on a network including a mobile device, the method comprising:

receiving a search request of the published content from a user interface of the mobile device;

retrieving, from a memory of the mobile device, access information including role data identifying one or more user roles assigned to the mobile device, the access information being pushed to the mobile device;

sending the access information and the search request to the network;

receiving a search result including a list of published content having an access credential matching the access information, the access credential being associated with the published content; and

allowing the mobile device to download the published content from the search result.

14. The method according to claim 13, wherein the search request is sent to a discovery service on the network and the discovery service determines access to the published content by matching the access credential with the access information.

15. The method according to claim 13, wherein allowing further comprises:

accepting a user selection from the search result;

sending the user selection to a retrieving service; and

downloading the published content associated with the user selection from the retrieving service.

16. The method according to claim 13, wherein the access information is part of a service book.

17. The method according to claim 13, wherein the access information is pushed to the mobile device during initialization of the mobile device.

18. The method according to claim 13, further comprising:

updating the access information stored in the memory by pushing the updated access information to the mobile device.

19. The method according to claim 13, wherein the access information stored in the memory is uneditable by a user or invisible to the user.

20. The method according to claim 13, wherein the access information is encrypted.