Contents transmission method and contents transmission system

• US 8,281,391 B2
• Filed: 02/27/2009
• Issued: 10/02/2012
• Est. Priority Date: 01/08/2002
• Status: Active Grant

• Current Assignee: NTT Docomo Incorporated (Nippon Telegraph and Telephone Corporation)
• Original Assignee: NTT Docomo Incorporated (Nippon Telegraph and Telephone Corporation)
• Inventors: Yamada, Kazuhiro, Watanabe, Nobuyuki, Tsuda, Masayuki, Kamiya, Dai, Asai, Mao, Miura, Fumiaki, Washio, Satoshi, Tomioka, Atsuki, Kawabata, Hiroshi, Kondo, Takashi
• Primary Examiner(s): Hoffman, Brandon
• Assistant Examiner(s): Woldemariam, Nega
• Application Number:
  US12/394,724
• Publication Number:
  US 20090165130A1
• Time in Patent Office: 1,313 Days
• Field of Search: 709/211, 709/212, 709/216, 709/217, 709/229, 707/600, 707/607, 707/608, 707/609, 707/687, 386/52, 386/124, 386/126, 386/95, 386/96
• US Class Current: 726/21
• CPC Class Codes: G06F 21/53 by executing in a restricted environment, e.g. sandbox or secure virtual machine
• CPC Class Codes: H04L 63/10 for controlling access to devices or network resources
• CPC Class Codes: H04M 1/2757 by data transmission, e.g. downloading
• CPC Class Codes: H04M 1/72406 by software upgrading or downloading
• CPC Class Codes: H04M 1/72445 for supporting Internet browser applications

Abstract

Mobile unit 16 which can activate Java-AP software receives SDF (Security Descriptive File) 204 from administering server unit 18 which a trustworthy organization (a communication provider which administers mobile packet communication network 15) administers, and obtains ADF 205 from IP server unit 13 by using URL contained in the SDF, and obtains Jar file 206 from IP server unit 13 by using ADF 205, and installs in itself Java-AP containing these files. Java-AP, which is achieved by activating the installed Java-AP software, operates within the range of authorization expressed by policy information contained in SDF 204.

Claims

1. A terminal unit, comprising:

an executing unit configured to execute at least a first type of program and a second type of program, the first type of program requiring a security descriptive file, the second type of program not requiring the security descriptive file, the security descriptive file including authorization information, the authorization information being information used for controlling access by a program to at least one resource from among a hardware resource, a network resource or a software resource, the security descriptive file being different from an application descriptive file, the application descriptive file showing a stored location of an entity file, the entity file including a program to be executed by the executing unit;

a determining unit configured to determine whether a program to be executed by the executing unit is the first type or the second type;

a controlling unit configured to control access to the at least one resource in accordance with a first condition if the program to be executed by the executing unit is determined to be the first type, and configured to control access to the at least one resource in accordance with a second condition if the program to be executed by the executing unit is determined to be the second type, the first condition being a condition based on the authorization information.

2. The terminal unit according to claim 1, wherein the first condition is more permissive that the second condition.

3. The terminal unit according to claim 1, wherein

the first condition is a condition to permit access to a resource in accordance with the authorization information as well as access to the resource in accordance with a predetermined condition, and

the second condition is a condition to permit access to the resource in accordance with the predetermined condition.

4. The terminal unit according to claim 1, wherein:

the terminal unit further includes a first obtaining unit configured to obtain the authorization information through a network;

the security descriptive file shows a stored location of the application descriptive file;

the terminal unit further includes a second obtaining unit configured to obtain the application descriptive file from the stored location shown by the security descriptive file;

the terminal unit further includes a third obtaining unit configured to obtain the entity file from the stored location shown by the application descriptive file;

the terminal unit further includes an install unit configured to install in the terminal unit the program included in the entity file; and

the executing unit is configured to execute the program installed by the installed unit.

5. The terminal unit according to claim 1, wherein

the software resource includes at least one of an API (Application Program Interface), a class or a package.

6. The terminal unit according to claim 1, wherein

the authorization information shows a type of use of a resource.

7. The terminal unit according to claim 1, further comprising at least one of a memory, a speaker, a microphone, an infrared controller, or a light emitting diode as the hardware resource.

8. The terminal unit according to claim 1, wherein the hardware resource includes an external device which is a device other than the terminal unit.

9. The terminal unit according to claim 1, further comprising

a wireless communication unit configured to communicate through a network, and

the network resource includes at least one of a wireless communication channel, a packet transmission path, a connection provided by the network.

10. A computer-readable non-transitory storage medium storing a program causing a computer device to execute a process, the computer device including an executing unit configured to execute at least a first type of program and a second type of program, the first type of program requiring a security descriptive file, the second type of program not requiring the security descriptive file, the security descriptive file including authorization information, the authorization information being information used for controlling an access by a program to at least one resource from among a hardware resource, a network resource and a software resource, the security descriptive file being different from an application descriptive file, the application descriptive file showing a stored location of an entity file, the entity file including a program to be executed by the executing unit;

the process comprising;

determining whether a program to be executed by the executing unit is the first type or the second type;

controlling an access to the at least one resource in accordance with a first condition if the program to be executed by the executing unit is determined to the first type, and configured to control an access to the at least one resource in accordance with a second condition if the program to be executed by the executing unit is determined to the second type, the first condition being a condition based on the authorization information.