Patent Application
20070288989
Having thus described exemplary embodiments of the invention in general terms, reference will now be made to the accompanying drawings, which are not necessarily drawn to scale, and wherein:
Exemplary embodiments of the present invention now will be described more fully hereinafter with reference to the accompanying drawings, in which some, but not all embodiments of the inventions are shown. Indeed, these inventions may be embodied in many different forms and should not be construed as limited to the embodiments set forth herein; rather, these embodiments are provided so that this disclosure will satisfy applicable legal requirements. Like numbers refer to like elements throughout.
Reference is now made to
Once the software component has been developed, in Step 102, a policy update script is generated that describes the modifications that must be made to the electronic device security policy in order to enable the new software component to access other services and resources of the electronic device, and vice versa (i.e., the modifications grant the appropriate permissions to the various components). The policy update script may, for example, be in the form of an Extensible Markup Language (XML) file, or the like.
The developed software component and the corresponding policy update script are then combined, in Step 103 into a deployment (or installation) package for deployment on the device. The deployer (or party responsible for creating the deployment package and providing it to the electronic device, which may or may not be the software developer), in Step 104 signs the package (i.e., incorporates a digital signature, such as a private key, with the package). The signature will be used to verify whether and to what extent the signer (i.e., the deployer) is authorized to modify the electronic device security policy; thus providing increased security to the policy updating process. In one exemplary embodiment, different parties may be provided with different levels of authorization. For example, where one party may have authorization to make wholesale modifications to the existing security policy, other parties may have only restricted access.
The deployment or installation package, including the software component, the policy update script and the signature, is then provided to the device in Step 105. In one exemplary embodiment, this step is performed where the user of the electronic device initiates the download of the software component over a network, such as a wide area network (WAN), or the like. Alternatively, the software component may be pushed to the electronic device. As one of ordinary skill in the art will recognize, the software component may be transmitted via any number of mechanisms, including, for example, over Bluetooth, a USB cable, infrared, or even a multimedia card (MMC), without departing from the spirit and scope of exemplary embodiments of the present invention.
Regardless of how the deployment package is received by the electronic device (in Step 106), upon receipt, installation of the deployment package begins (Step 107). In one exemplary embodiment, at the commencement of the installation process, the deployer's signature is verified in order to determine, as stated above, whether and to what extent the party transmitting the deployment package is in fact authorized to modify the existing security policy of the mobile device (Step 108). Assuming the signature is verified and that the deployer is authorized (based on the existing electronic device security policy), in Step 109, the policy update script is processed in order to effect the modifications to the security policy that are described by or included in the policy update script.
In particular, according to the OSGi specification, a deployment service exists on the electronic device that is configured to process deployment or installation packages received by the electronic device. This deployment service comprises one or more plug-ins called resource processors, wherein different resource processors are capable of processing different installation packages. In particular, resource processors, or software components that may be located on the device itself or within the deployment package to be installed, handle the lifecycle of specific resource types by processing the resource to create artifacts that are then removed when the resource is dropped. The use of a plug-in architecture for the deployment service is beneficial since it enables the use of multiple types of resources in the installation package (i.e., for each new type of resource a new resource processor, or plug-in, can be added where necessary).
According to exemplary embodiments of the present invention, a new plug-in or OSGi resource processor, referred to as the Policy Update Resource Processor is included in the deployment service. The Policy Update Resource Processor is configured to recognize the policy update script and to conduct the necessary security policy update according to the script. In one exemplary embodiment, usage of the Policy Update Resource Processor is protected by a new Java 2 permission, such that only deployment packages assigned this new permission can run this new processor. The assignment of the Java 2 permission is carried out based on the signature information of the deployment package. In other words, verifying the signature incorporated with the package in order to determine whether, and to what extent, the signer is authorized to modify the security policy, in essence verifies that the party signing the package has been given the new permission.
As mentioned briefly above, exemplary embodiments of the present invention are not limited to situations where a new software component is to be installed on the electronic device. In contrast, the policy update script may be used any time a party desires to modify the existing security policy and is authorized to do so. In one exemplary embodiment, rather than including the policy update script in a deployment package for a new software component, a manufacturer or operator may create an “empty” deployment or installation package containing only the policy update script (thus eliminating Step 101). The manufacturer or operator could then provide the package to the appropriate parties, such as the software developer. Using this technique, manufacturers and operators would no longer be required to run the actual installation or remote policy management themselves. The below exemplary use case provides an example of where an empty deployment package may be used.
The following describes a scenario in which exemplary embodiments of the present invention would be particularly useful. As discussed above, downloadable applications and software components are executed under the control of the electronic device security policy and the OSGi service platform. In particular, software components have limited capabilities (e.g., in terms of what services or resources they can access, and vice versa), which are often granted based on the digital signatures authenticating the application code and the electronic device security policy.
At the time of development of these applications, however, developers need special access to the device (i.e., they may require special capabilities for their applications). Developer permissions may, therefore, be granted for particular devices, which may be identified by the device's International Mobile Equipment Identification (IMEI). Granting these permissions is a complex and expensive process and only a few authorized parties are authorized to do so.
For example, one method of granting the requisite permissions is based on the creation of different developer platforms, wherein a special developer certificate may be locked to the IMEIs of one or more specific devices. Developers use private keys corresponding to these certificates when signing their applications. The applications can then be executed on the devices with the listed IMEIs. One drawback to this method, however, is that it assumes that the root certificates that can be used for signing the developer certificates have been provided to the one or more devices at the time of manufacture. In addition, a special mechanism is required that can recognize that the developer certificate is locked to particular IMEI numbers and act accordingly.
Exemplary embodiments of the present invention provide a better solution to the issue of providing developers with special permissions (i.e., one that overcomes at least the above-referenced drawbacks) by combining the conditional permission framework of the OSGi Service Platform with the policy update scripts described above. In particular, the OSGi Service Platform Release 4 is extending the standard Java 2 security system with a conditional permission framework that would allow granting permissions based on different conditions. OSGi policies, therefore, comprise a list of conditions, wherein if those conditions are met, then a certain permission is granted. One such condition, referred to as the IMEICondition, ties the granting of certain permission to the IMEI of the device. This allows certain permissions to be granted on certain categories of devices, or on only single devices.
Exemplary embodiments of the present invention combine the IMEICondition with the use of a policy update script in order to create terminal-specific scripts that can be used to update the security policies of only specific electronic devices (e.g., devices on which software developers wish to test their software—i.e., devices the developer wishes to turn into developer devices).
In particular, according to exemplary embodiments of the present invention, a developer may provide the IMEIs of the devices they would like to use as developer devices to an authorized policy administrator of those devices (i.e., to a party with authorization to create policy update scripts that will be read by a Policy Update Resource Processor on the device in order to modify the existing security policy). The authorized policy administrator, in turn, creates a policy update script granting the requisite permissions (e.g., AllPermission) to the developers and includes the IMEICondition in the script. In other words, the permission is granted conditionally only for those devices identified by their IMEI. The authorized policy administrator puts the script into a deployment package (i.e., the standard installation scripts of the OSGi platform), signs the package with his private key and then returns the signed package to the developer. Upon receipt of the package, the developer can execute the package on the device, which, in turn, executes the policy update script. The execution of the deployment package is authorized, based on the authorized policy administrator's signature, to perform the policy update script. From that point on, the developer will have all of the rights described in the policy update script, with respect to the device(s) identified by their IMEIs. If the deployment package were to be executed with respect to a device not identified in the IMEICondition, the device's security policy would not be affected, since the condition would not be met and, therefore, the permission would not be granted.
The foregoing solution is beneficial because it enables parties having rights to update an electronic device security policy (e.g., the device manufacturer) to delegate that right to, for example, a network operator that can then create developer devices in their developer community. It further eliminates the need to create developer certificates and lock those certificates to the IMEIs of various devices. Permissions can be granted selectively, providing the policy administrator with more fine-grained control than in the case of developer certificates.
Referring to
The MSC 16 can be coupled to a data network, such as a local area network (LAN), a metropolitan area network (MAN), and/or a wide area network (WAN). The MSC can be directly coupled to the data network. In one typical embodiment, however, the MSC is coupled to a Packet Control Function (PCF) 18, and the PCF is coupled to a Packet Data Serving Node (PDSN) 19, which is in turn coupled to a WAN, such as the Internet 20. In turn, devices such as processing elements (e.g., personal computers, server computers or the like) can be coupled to the mobile station 10 via the Internet. For example, the processing elements can include devices corresponding with an Authorized Policy Administrator 22 (i.e., a party having authorization to create policy update scripts that will be read by a Policy Update Resource Processor on the mobile station in order to modify the existing security policy) and/or a Software Developer 24, discussed above. As will be appreciated, the processing elements can comprise any of a number of processing devices, systems or the like capable of operating in accordance with embodiments of the invention.
The BS 14 can also be coupled to a signaling GPRS (General Packet Radio Service) support node (SGSN) 30. As known to those skilled in the art, the SGSN is typically capable of performing functions similar to the MSC 16 for packet switched services. The SGSN, like the MSC, can be coupled to a data network, such as the Internet 20. The SGSN can be directly coupled to the data network. In a more typical embodiment, however, the SGSN is coupled to a packet-switched core network, such as a GPRS core network 32. The packet-switched core network is then coupled to another GTW, such as a GTW GPRS support node (GGSN) 34, and the GGSN is coupled to the Internet.
Although not every element of every possible network is shown and described herein, it should be appreciated that the mobile station 10 may be coupled to one or more of any of a number of different networks. In this regard, mobile network(s) can be capable of supporting communication in accordance with any one or more of a number of first-generation (1G), second-generation (2G), 2.5G and/or third-generation (3G) mobile communication protocols or the like. More particularly, one or more mobile stations may be coupled to one or more networks capable of supporting communication in accordance with 2G wireless communication protocols IS-136 (TDMA), GSM, and IS-95 (CDMA). Also, for example, one or more of the network(s) can be capable of supporting communication in accordance with 2.5G wireless communication protocols GPRS, Enhanced Data GSM Environment (EDGE), or the like. In addition, for example, one or more of the network(s) can be capable of supporting communication in accordance with 3G wireless communication protocols such as Universal Mobile Telephone System (UMTS) network employing Wideband Code Division Multiple Access (WCDMA) radio access technology. Some narrow-band AMPS (NAMPS), as well as TACS, network(s) may also benefit from embodiments of the invention, as should dual or higher mode mobile stations (e.g., digital/analog or TDMA/CDMA/analog phones).
One or more mobile stations 10 (as well as one or more processing elements, although not shown as such in
Although not shown in
Referring now to
In addition to the memory 220, the processor 210 can also be connected to at least one interface or other means for displaying, transmitting and/or receiving data, content or the like (e.g., for transmitting and/or receiving a generated software component, policy update script and/or signature). In this regard, the interface(s) can include at least one communication interface 230 or other means for transmitting and/or receiving data, content or the like, as well as at least one user interface that can include a display 240 and/or a user input interface 250. The user input interface, in turn, can comprise any of a number of devices allowing the entity to receive data from a user, such as a keypad, a touch display, a joystick or other input device.
Reference is now made to
The mobile station includes various means for performing one or more functions in accordance with exemplary embodiments of the invention, including those more particularly shown and described herein. It should be understood, however, that one or more of the entities may include alternative means for performing one or more like functions, without departing from the spirit and scope of embodiments of the invention. More particularly, for example, as shown in
It is understood that the processing device 308, such as a processor, controller or other computing device, includes the circuitry required for implementing the video, audio, and logic functions of the mobile station and is capable of executing application programs for implementing the functionality discussed herein. For example, the processing device may be comprised of various means including a digital signal processor device, a microprocessor device, and various analog to digital converters, digital to analog converters, and other support circuits. The control and signal processing functions of the mobile device are allocated between these devices according to their respective capabilities. The processing device 308 thus also includes the functionality to convolutionally encode and interleave message and data prior to modulation and transmission. The processing device can additionally include an internal voice coder (VC) 308A, and may include an internal data modem (DM) 308B. Further, the processing device 308 may include the functionality to operate one or more software applications, which may be stored in memory. For example, the controller may be capable of operating a connectivity program, such as a conventional Web browser. The connectivity program may then allow the mobile station to transmit and receive Web content, such as according to HTTP and/or the Wireless Application Protocol (WAP), for example.
The mobile station may also comprise means such as a user interface including, for example, a conventional earphone or speaker 310, a ringer 312, a microphone 314, a display 316, all of which are coupled to the controller 308. The user input interface, which allows the mobile device to receive data, can comprise any of a number of devices allowing the mobile device to receive data, such as a keypad 318, a touch display (not shown), a microphone 314, or other input device. In embodiments including a keypad, the keypad can include the conventional numeric (0-9) and related keys (#, *), and other keys used for operating the mobile station and may include a full set of alphanumeric keys or set of keys that may be activated to provide a full set of alphanumeric keys. Although not shown, the mobile station may include a battery, such as a vibrating battery pack, for powering the various circuits that are required to operate the mobile station, as well as optionally providing mechanical vibration as a detectable output.
The mobile station can also include means, such as memory including, for example, a subscriber identity module (SIM) 320, a removable user identity module (R-UIM) (not shown), or the like, which typically stores information elements related to a mobile subscriber. In addition to the SIM, the mobile device can include other memory. In this regard, the mobile station can include volatile memory 322, as well as other non-volatile memory 324, which can be embedded and/or may be removable. For example, the other non-volatile memory may be embedded or removable multimedia memory cards (MMCs), Memory Sticks as manufactured by Sony Corporation, EEPROM, flash memory, hard disk, or the like. The memory can store any of a number of pieces or amount of information and data used by the mobile device to implement the functions of the mobile station. For example, the memory can store an identifier, such as an international mobile equipment identification (IMEI) code, international mobile subscriber identification (IMSI) code, mobile device integrated services digital network (MSISDN) code, or the like, capable of uniquely identifying the mobile device. The memory can also store content. The memory may, for example, store computer program code for an application and other computer programs. For example, in one embodiment of the invention, the memory may store computer program code for performing any combination of Steps 106-109 of
The system, method, electronic device, network entity and computer program product of exemplary embodiments of the invention are primarily described in conjunction with mobile communications applications. It should be understood, however, that the system, method, electronic device, network entity and computer program product of embodiments of the invention can be utilized in conjunction with a variety of other applications, both in the mobile communications industries and outside of the mobile communications industries. For example, the system, method, electronic device, network entity and computer program product of exemplary embodiments of the invention can be utilized in conjunction with wireline and/or wireless network (e.g., Internet) applications.
As described above and as will be appreciated by one skilled in the art, embodiments of the invention may be configured as a system, method, electronic device, network entity and computer program product. Accordingly, embodiments of the invention may be comprised of various means including entirely of hardware, entirely of software, or any combination of software and hardware. Furthermore, embodiments of the invention may take the form of a computer program product on a computer-readable storage medium having computer-readable program instructions (e.g., computer software) embodied in the storage medium. Any suitable computer-readable storage medium may be utilized including hard disks, CD-ROMs, optical storage devices, or magnetic storage devices.
Exemplary embodiments of the invention have been described above with reference to block diagrams and flowchart illustrations of methods, apparatuses (i.e., systems) and computer program products. It will be understood that each block of the block diagrams and flowchart illustrations, and combinations of blocks in the block diagrams and flowchart illustrations, respectively, can be implemented by various means including computer program instructions. These computer program instructions may be loaded onto a general purpose computer, special purpose computer, or other programmable data processing apparatus to produce a machine, such that the instructions which execute on the computer or other programmable data processing apparatus create a means for implementing the functions specified in the flowchart block or blocks.
These computer program instructions may also be stored in a computer-readable memory that can direct a computer or other programmable data processing apparatus to function in a particular manner, such that the instructions stored in the computer-readable memory produce an article of manufacture including computer-readable instructions for implementing the function specified in the flowchart block or blocks. The computer program instructions may also be loaded onto a computer or other programmable data processing apparatus to cause a series of operational steps to be performed on the computer or other programmable apparatus to produce a computer-implemented process such that the instructions that execute on the computer or other programmable apparatus provide steps for implementing the functions specified in the flowchart block or blocks.
Accordingly, blocks of the block diagrams and flowchart illustrations support combinations of means for performing the specified functions, combinations of steps for performing the specified functions and program instruction means for performing the specified functions. It will also be understood that each block of the block diagrams and flowchart illustrations, and combinations of blocks in the block diagrams and flowchart illustrations, can be implemented by special purpose hardware-based computer systems that perform the specified functions or steps, or combinations of special purpose hardware and computer instructions.
Many modifications and other embodiments of the inventions set forth herein will come to mind to one skilled in the art to which these exemplary embodiments of the invention pertain having the benefit of the teachings presented in the foregoing descriptions and the associated drawings. Therefore, it is to be understood that exemplary embodiments of the inventions are not to be limited to the specific embodiments disclosed and that modifications and other embodiments are intended to be included within the scope of the appended claims. Although specific terms are employed herein, they are used in a generic and descriptive sense only and not for purposes of limitation.
