Access control system and method for wireless application provisioning

• US 7,870,255 B2
• Filed: 10/03/2006
• Issued: 01/11/2011
• Est. Priority Date: 10/03/2006
• Status: Active Grant

• Current Assignee: Malikie Innovations Limited (Key Patent Innovations Limited)
• Original Assignee: Blackberry Limited
• Inventors: Bibr, Viera, Fritsch, Brindusa, Shenfield, Michael
• Primary Examiner(s): Meky; Moustafa M
• Application Number:
  US11/538,083
• Publication Number:
  US 20080082646A1
• Time in Patent Office: 1,561 Days
• Field of Search: 709200-203, 709217-227, 709228-229, 713161-170
• US Class Current: 709/225
• CPC Class Codes: H04L 63/102 Entity profiles
• CPC Class Codes: H04L 67/04 specially adapted for terminals or networks with limited capabilities; specially adapted for terminal portability
• CPC Class Codes: H04W 12/08 Access security
• CPC Class Codes: H04W 12/35 Protecting application or service provisioning, e.g. securing SIM application provisioning
• CPC Class Codes: H04W 88/02 Terminal devices

Abstract

A method for controlling access to content on a network, the method comprising the steps of associating access credentials with content to be published for download receiving a content download request from a mobile device, the content download request including access information, matching the received access information with the published content access credentials to permit access to the published content and allowing the permitted content to be downloaded by the mobile device.

Claims

1. A method for controlling access by a mobile device to content on a network, the method comprising:

provisioning the mobile device with an access information including a role data identifying one or more roles assigned to a user of the mobile device within a corporate network;

wherein the role data is pushed to the mobile device as part of a service book;

associating access credentials with a published content for download;

receiving a content download request from the mobile device, the content download request including access information;

matching the access credentials with the access information received from the mobile device to permit access to the published content; and

allowing content to be downloaded by the mobile device for which the access information matches the access credentials.

2. A method as claimed in claim 1, wherein the service book including the role data is pushed to the mobile device for updating when the user roles changes.

3. A method as claimed in claim 1, wherein the role data is stored on the mobile device and the role data is un-editable by the user.

4. A method as claimed in claim 1, further comprising updating the role data stored on the mobile device when the one or more roles change within the corporate network.

5. A method as claimed in claim 1, wherein the content includes wireless applications.

6. A system for controlling access to content on a network, via a mobile device, comprising:

a content registry for publishing content for download from the network, the content having access credentials associated therewith;

a provisioning system for pushing an access information to the mobile device, the access information including a role data identifying one or more roles assigned to a user of the mobile device within a corporate network; and

a discovery service for;

receiving a content download request from the mobile device, the content download request including an access information; and

permitting access by the mobile device to the published content having access credentials matching the received access information.

7. A system as claimed in claim 6, wherein the content registry comprises:

descriptors for the content; and

the access credentials.

8. A system as claimed in claim 7, further comprising a content repository for storing the content and the descriptors in the registry being associated with respective content in the repository.

9. A system as claimed in claim 6, further comprising a provisioning service being configured to allow the permitted content to be downloaded by the mobile device.

10. A system as claimed in claim 9, wherein the provisioning service downloads content from the content repository upon receipt of a request for selected permitted content from the mobile device.

11. A system as claimed in claim 9, wherein the provisioning service is for downloading the content over the air (OTA) to the mobile device.