Certificate management and transfer system and method

• US 8,539,226 B2
• Filed: 09/01/2011
• Issued: 09/17/2013
• Est. Priority Date: 06/12/2001
• Status: Expired due to Term

• Current Assignee: Malikie Innovations Limited (Key Patent Innovations Limited)
• Original Assignee: Blackberry Limited
• Inventors: Little, Herbert Anthony, Adams, Neil Patrick, Tapuska, David Francis, Brown, Michael Stephen, Godfrey, James Andrew, Kirkup, Michael Grant
• Primary Examiner(s): CHEN, SHIN HON
• Application Number:
  US13/223,999
• Publication Number:
  US 20120060026A1
• Time in Patent Office: 747 Days
• Field of Search: None
• US Class Current: 713/156
• CPC Class Codes: G06Q 10/107 Computer-aided management of electronic mailing [e-mailing]
• CPC Class Codes: H04L 12/189 in combination with wireless systems selective distribution or broadcast in wireless communication networks H04W4/06
• CPC Class Codes: H04L 51/00 User-to-user messaging in packet-switching networks, transmitted according to store-and-forward or real-time protocols, e.g. e-mail
• CPC Class Codes: H04L 51/58 Message adaptation for wireless communication
• CPC Class Codes: H04L 63/0272 Virtual private networks
• CPC Class Codes: H04L 63/0442 wherein the sending and receiving network entities apply asymmetric encryption, i.e. different keys for encryption and decryption cryptographic mechanisms or cryptographic arrangements for public-key encryption H04L9/30
• CPC Class Codes: H04L 63/045 wherein the sending and receiving network entities apply hybrid encryption, i.e. combination of symmetric and asymmetric encryption cryptographic mechanisms or cryptographic arrangements using a plurality of keys or algorithms H04L9/14
• CPC Class Codes: H04L 63/062 for key distribution, e.g. centrally by trusted party cryptographic mechanisms or cryptographic arrangements for key distribution involving a central third party H04L9/0819
• CPC Class Codes: H04L 63/0823 using certificates cryptographic mechanisms or cryptographic arrangements for entity authentication involving certificates H04L9/3263
• CPC Class Codes: H04L 63/101 Access control lists [ACL]
• CPC Class Codes: H04L 63/126 the source of the received data
• CPC Class Codes: H04L 67/04 specially adapted for terminals or networks with limited capabilities; specially adapted for terminal portability
• CPC Class Codes: H04W 12/033 of the user plane, e.g. user's traffic
• CPC Class Codes: H04W 12/041 Key generation or derivation
• CPC Class Codes: H04W 12/0471 Key exchange
• CPC Class Codes: H04W 12/106 Packet or message integrity
• CPC Class Codes: H04W 92/18 between terminal devices

Abstract

A method and system for Certificate management and transfer between messaging clients are disclosed. When communications are established between a first messaging client and a second messaging client, one or more Certificates stored on the first messaging client may be selected and transferred to the second messaging client. Messaging clients may thereby share Certificates. Certificate management functions such as Certificate deletions, Certificate updates and Certificate status checks may also be provided.

Claims

1. A method of certificate management and transfer between a computer system having a first data transfer interface and a mobile device having a second data transfer interface compatible with the first data transfer interface, the method comprising:

establishing communications between the computer system and the mobile device via the first data transfer interface and the second data transfer interface;

checking status of certificates stored at one of the computer system and the mobile device;

determining one or more certificates from the valid certificates stored at the one of the computer system and the mobile device for transfer to the other of the computer system and the mobile device; and

transferring the one or more certificates from the one of the computer system and the mobile device to the other of the computer system and the mobile device, wherein the transferred one or more certificates are used to handle messages communicated via the wireless communication network that are received from or to be transmitted to one or more remote entities whose communications are associated with the transferred one or more certificates.

2. The method of claim 1, wherein:

establishing communications between the computer system and the mobile device comprises establishing a communications link between the first data transfer interface and the second data transfer interface; and

the communications link is selected from the group consisting of;

a physical communications link and a wireless communications link.

3. The method of claim 1, further comprising generating a list of certificates stored at the one of the computer system and the mobile device, wherein generating the list of certificates comprises:

identifying certificates that are stored at the one of the computer system and the mobile device;

identifying certificates that are stored at the other of the computer system and the mobile device; and

generating a list of certificates that are stored only at the one of the computer system and the mobile device and not at the other of the computer system and the mobile device.

4. The method of claim 1, further comprising storing the one or more certificates in a data store on the other of the computer system and the mobile device.

5. The method of claim 1, further comprising:

determining one or more certificates stored at the other of the computer system and the mobile device for transfer to the one of the computer system and the mobile device; and

transferring the one or more certificates stored at the other of the computer system and the mobile device from the other of the computer system and the mobile device to the one of the computer system and the mobile device.

6. The method of claim 1, wherein the computer system is selected from the group consisting of:

a desktop computer system, a laptop computer system, and a mobile device.

7. The method of claim 1, wherein the checking status of certificates act is performed periodically.

8. A system for certificate management and transfer, the system comprising:

a computer system comprising;

a first memory comprising a first certificate store configured to store certificates;

a first certificate synchronization system configured to access the first certificate store; and

a first communications interface; and

a mobile device comprising;

a second memory comprising a second certificate store configured to store certificates;

a second certificate synchronization system configured to access the second certificate store;

a wireless transceiver that enables the mobile device for communications in a wireless communication network; and

a second communications interface compatible with the first communications interface,

wherein the first certificate synchronization system is further configured to transfer certificates stored in the first certificate store from the computer system to the mobile device when a communications link is established between the computer system and the mobile device via the first communications interface and the second communications interfaces, wherein the first certificate synchronization system checks status of the certificates stored in the first certificate store to ensure that valid certificates are transferred to the mobile device, wherein the transferred certificates are used to handle messages communicated via the wireless communication network that are received from or to be transmitted to remote entities whose communications are associated with the transferred certificates.

9. The system of claim 8, wherein the second certificate synchronization system is further configured to store certificates transferred from the computer system to the mobile device to the second certificate store.

10. The system of claim 9, wherein the second certificate synchronization system is further configured to transfer certificates stored in the second certificate store from the mobile device to the computer system when the communications link is established between the computer system and the mobile device via the first communications interface and the second communications interface.

11. The system of claim 8, wherein the first certificate synchronization system is further configured to check the status of each certificate stored in the second certificate store to detect expired, invalid or revoked certificates stored in the second certificate store.

12. The system of claim 8, wherein the computer system is selected from the group consisting of:

a desktop computer system, a laptop computer system, and a mobile device.

13. The system of claim 8, wherein the mobile device is selected from the group consisting of:

a data communication device, a voice communication device, a dual-mode communication device having both data and voice communications functionality, a cellular telephone having data communications functionality, a personal digital assistant (PDA) enabled for wireless communications, and a laptop or desktop computer system with a wireless modem.

14. The system of claim 8, further comprising:

at the computer system;

a first messaging system; and

a first communications subsystem; and

at the mobile device;

a second messaging system; and

a second communications subsystem,

wherein the first messaging system is configured to store certificates received via the first communications subsystem to the first certificate store and the second messaging system is configured to store certificates received via the second communications subsystem to the second certificate store.

15. The system of claim 8, wherein the first communications interface and the second communications interface establish a physical link between the computer system and the mobile device.

16. The system of claim 15, wherein the first communications interface and the second communications interface are selected from the group consisting of:

serial ports and Universal Serial Bus (USB) ports.

17. The system of claim 8, wherein the first communications interface and the second communications interface establish a wireless link between the computer system and the mobile device.

18. The system of claim 17, wherein the first communications interface and the second communications interface are selected from the group consisting of:

Infrared Data Association (IrDA) ports, Bluetooth modules and 802.11 modules.