Method for validating an application for use in a mobile communication device

• US 6,775,536 B1
• Filed: 11/03/2000
• Issued: 08/10/2004
• Est. Priority Date: 11/03/1999
• Status: Expired due to Term

• Current Assignee: Google Technology Holdings LLC (Alphabet Inc.)
• Original Assignee: Motorola, Inc. (Motorola Solutions, Inc.)
• Inventors: Geiger, Robert L., Subramanian, Ambiga, Battenhouse, Anna, Palaniswamy, Avinash C., Van Peursem, James E., Lin, Jyh-Han
• Primary Examiner(s): Gelin, Jean
• Application Number:
  US09/705,982
• Time in Patent Office: 1,376 Days
• Field of Search: 455/411, 455/445, 455/410, 713/200, 713/201, 713/175, 713/155, 713/176, 713/156, 713/160, 713/178, 713/165, 713/193, 717/165, 709/217, 709/219, 709/246, 709/250, 709/203, 709/229, 709/232, 380/231, 380/30, 380/255, 380/270, 370/351, 370/353
• US Class Current: 455/411
• CPC Class Codes: G06F 21/51 at application loading time, e.g. accepting, rejecting, starting or inhibiting executable software based on integrity or source reliability
• CPC Class Codes: G06F 21/606 by securing the transmission between two devices or processes
• CPC Class Codes: G06F 21/6218 to a system of files or objects, e.g. local or distributed file system or database
• CPC Class Codes: G06F 2221/2149 Restricted operating environment
• CPC Class Codes: H04L 63/0823 using certificates cryptographic mechanisms or cryptographic arrangements for entity authentication involving certificates H04L9/3263
• CPC Class Codes: H04L 63/0884 by delegation of authentication, e.g. a proxy authenticates an entity to be authenticated on behalf of this entity vis-à-vis an authentication entity
• CPC Class Codes: H04L 63/102 Entity profiles
• CPC Class Codes: H04L 63/104 Grouping of entities

Abstract

A wireless domain (602) sets a security policy for all mobile communication devices (606) within the domain by use of a system entry proxy server (604). A developer makes an application or code segment available at a developer station (600). The application is certified by a certificate defining a developer security setting. The user of the mobile communication device initiates a download of the application so that it can be installed onto the mobile communication device. The application is downloaded through the system entry proxy server which authenticates the application, then re-certifies it with a compact certificate including an operator defined security policy. In this way the operator can control which resources of the mobile communication device are accessed by all applications coming into the wireless domain.

Claims

1. A method for validating an application for use in a mobile communication device, comprising:

receiving a request for the application from the mobile communication device at a system entry proxy server;

forwarding the request to a developer station, performed by the system entry proxy server;

receiving the application from the developer station at the system entry proxy server;

authenticating the application at the system entry-proxy server;

re-certifying the application with a compact certificate suitable for use in the mobile communication device, thereby producing a re-certified application; and

forwarding the re-certified application to the mobile communication device.

2. A method for controlling a security setting of an application for execution in a mobile communication device, comprising:

providing a corporate root certificate in the mobile communication device;

providing a corporate domain including a developer station and a corporate proxy server;

transmitting a request for the application from the mobile communication device to the developer station, through the corporate proxy server;

transmitting the application to the corporate proxy server;

authenticating the application at the corporate proxy server;

re-certifying the application with a signed attribute certificate at the corporate proxy server, thereby providing a re-certified application, the signed attribute certificate specifying a desired level of security for the application; and

transmitting the re-certified application the mobile communication device.

3. A method of re-certifying an application for use in a mobile communication device, comprising:

providing, at a developer station, the application including an associated authentication means;

providing a system entry proxy server which controls the entry of applications into a wireless domain in which the mobile communication device is operating;

providing a root certificate for the system entry proxy server in the mobile communication device;

transmitting a request for the application to the developer station from the mobile communication device;

transmitting the application from the developer station to the system entry proxy server;

authenticating the application with the associated authentication means;

validating the application at the system entry proxy server with a validation tool;

determining a security level for the application;

generating a compact certificate, including a security policy indicating the security level for the application; and

transmitting the application and compact certificate to the mobile communication device.