METHODS AND SYSTEMS FOR SERVER-INITIATED ACTIVATION OF DEVICE FOR OPERATION WITH SERVER

• US 20160285869A1
• Filed: 06/06/2016
• Published: 09/29/2016
• Est. Priority Date: 04/12/2013
• Status: Active Grant

• Current Assignee: Malikie Innovations Limited (Key Patent Innovations Limited)
• Original Assignee: Blackberry Limited
• Inventors: Truskovsky, Alexander, Martin, Daryl Joseph
• Granted Patent: US 10,075,438 B2
• Time in Patent Office: Days
• US Class Current: 1/1
• CPC Class Codes: H04L 47/70 Admission control; Resource allocation
• CPC Class Codes: H04L 63/0823 using certificates cryptographic mechanisms or cryptographic arrangements for entity authentication involving certificates H04L9/3263
• CPC Class Codes: H04L 63/0869 for achieving mutual authentication cryptographic mechanisms or cryptographic arrangements for mutual authentication H04L9/3273
• CPC Class Codes: H04L 63/10 for controlling access to devices or network resources
• CPC Class Codes: H04L 63/1458 Denial of Service
• CPC Class Codes: H04L 67/04 specially adapted for terminals or networks with limited capabilities; specially adapted for terminal portability
• CPC Class Codes: H04W 12/069 using certificates or pre-shared keys
• CPC Class Codes: H04W 88/02 Terminal devices

Abstract

Methods and systems for enabling activation of a wireless communication device to operate with a server on a wireless communication network. An activation request to establish a wireless communication service relationship between the device and the server is pushed from the server to the device. After the device verifies the server, a mutually authenticated communication session is established between the device and the server for activation of the device on the server.

Claims

1. A method for a wireless communication device, comprising:

receiving, by a device from a server, an activation request to establish a wireless communication service relationship between the device and the server, wherein the activation request is pushed from the server to the device in absence of any prior communication being sent from the device to the server;

attempting, by the device, to verify identity information of the server;

after the identity information of the server is verified by the device and input to accept the activation request is received by the device, establishing a mutually authenticated communication session between the device and the server; and

establishing, using the mutually authenticated communication, the wireless communication service relationship between the device and the server.

2. The method of claim 1, wherein the activation request is authenticated with a signature signed with a server certificate, wherein the server certificate includes server identity information, wherein the device attempts to verify one or both of the signature or the server identity information.

3. The method of claim 2, wherein the mutually authenticated communication session is authenticated by the device using the server certificate and a device certificate on the device.

4. The method of claim 3, wherein the server certificate also includes server authentication information, and wherein the device certificate the device certificate includes device identity information and device authentication information.

5. The method of claim 4, wherein the server is a mobile device management server distinct from a certificate authority which issued the server certificate and device certificate.

6. The method of claim 1, further comprising:

after the server is verified by the device and before input to accept the activation request, receiving pre-setting instructions from the server, and pre-setting the device with pre-settings in accordance with the pre-setting instructions from the server, wherein the pre-settings made on the device are initially inactive;

activating the pre-settings after the input to accept the activation request is received by the device.

7. The method of claim 6, further comprising:

removing the pre-settings after the input to reject the activation request is received by the device.

8. The method of claim 6, wherein pre-settings comprises one or more of pre-setting a security perimeter governing usage of one or more resources on the device, pre-installing an application on the device or pre-setting personal information management (PIM) on the device.

16. The method of claim 1, further comprising:

before notification that the activation request has been accepted is received, pushing pre-setting instructions to the device, wherein the pre-setting instructions cause pre-setting the device with pre-settings in accordance with the pre-setting instructions from the server, wherein the pre-settings made on the device are initially inactive until the activation request is accepted.

17. The method of claim 16, wherein the pre-setting instructions cause removal of the pre-settings after the input to reject the activation request is received by the device.

18. The method of claim 16, wherein pre-settings comprises one or more of pre-setting a security perimeter governing usage of one or more resources on the device, pre-installing an application on the device or pre-setting personal information management (PIM) on the device.

9. A wireless communication device, comprising:

a processor;

a memory coupled to the processor, the memory storing executable instructions that, when executed by the processor, cause the wireless communication device to;

receive, from a server, an activation request to establish a wireless communication service relationship between the device and the server, wherein the activation request is pushed from the server to the device in absence of any prior communication being sent from the device to the server;

attempt to verify identity information of the server;

after the identity information of the server is verified by the device and input to accept the activation request is received, establishing a mutually authenticated communication session between the device and the server; and

establishing, using the mutually authenticated communication, the wireless communication service relationship between the device and the server.

10. A non-transitory machine readable medium having tangibly stored thereon executable instructions for execution by a processor of a wireless communication device that, when executed by the processor, cause the wireless communication device to:

receive, from a server, an activation request to establish a wireless communication service relationship between the device and the server, wherein the activation request is pushed from the server to the device in absence of any prior communication being sent from the device to the server;

attempt to verify identity information of the server;

after the identity information of the server is verified by the device and input to accept the activation request is received, establishing a mutually authenticated communication session between the device and the server; and

establishing, using the mutually authenticated communication, the wireless communication service relationship between the device and the server.

11. A method for a server, comprising:

pushing to a device an activation request to establish a wireless communication service relationship between the device and the server, wherein the activation request is pushed from the server to the device in absence of any prior communication being sent from the device to the server;

after notification that the activation request has been accepted, establishing a mutually authenticated communication session between the device and the server; and

establishing, using the mutually authenticated communication, the wireless communication service relationship between the device and the server.

12. The method of claim 11, wherein the activation request is authenticated with a signature signed with a server certificate, wherein the server certificate includes server identity information, wherein the device attempts to verify one or both of the signature or the server identity information.

13. The method of claim 12, wherein the mutually authenticated communication session is authenticated by the device using the server certificate and a device certificate on the device.

14. The method of claim 12, wherein the server certificate also includes server authentication information, and wherein the device certificate the device certificate includes device identity information and device authentication information.

15. The method of claim 14, wherein the server is a mobile device management server distinct from a certificate authority which issued the server certificate and device certificate.

19. A server, comprising:

a processor;

a memory coupled to the processor, the memory storing executable instructions that, when executed by the processor, cause the server to;

push to a device an activation request to establish a wireless communication service relationship between the device and the server, wherein the activation request is pushed from the server to the device in absence of any prior communication being sent from the device to the server;

after notification that the activation request has been accepted, establish a mutually authenticated communication session between the device and the server; and

establish, using the mutually authenticated communication, the wireless communication service relationship between the device and the server.

20. A non-transitory machine readable medium having tangibly stored thereon executable instructions for execution by a processor of a server that, when executed by the processor, cause the server to:

push to a device an activation request to establish a wireless communication service relationship between the device and the server, wherein the activation request is pushed from the server to the device in absence of any prior communication being sent from the device to the server;

after notification that the activation request has been accepted, establish a mutually authenticated communication session between the device and the server; and

establish, using the mutually authenticated communication, the wireless communication service relationship between the device and the server.