System and method for updating message trust status
AssigneeBlackBerry Limited
InventorsMichael Kenneth Brown, Herbert Anthony Little, Michael Stephen Brown
Life of this patent
Estimating the term…
Abstract
Systems and methods for processing encoded messages within a wireless communications system are disclosed. A server within the wireless communications system performs signature verification of an encoded message and provides, together with the message, an indication to the mobile device that the message has been verified. In addition, the server provides supplemental information, such as, for example, a hash of the certificate or certificate chain used to verify the message, to the device, to enable the device to perform additional checks on the certificate, such as, for example, validity checks, trust checks, strength checks, or the like.
Claims20
A method at a server for handling delivery of messages to a recipient device associated with the server, the method comprising:
- receiving, from a sender system external to the server, a message at the server for transmission to the recipient device, the message including message content, a digital signature, and a certificate of a sender, wherein the digital signature is calculated using a private key associated with the certificate of the sender and appended thereto by the sender system;
- verifying the digital signature at the server using the certificate prior to the server providing any part of the message content and the certificate to the recipient device, wherein the sender system for appending the digital signature to the message is separate from the server for verifying the digital signature;
- and
- after the verifying,
- providing at least a portion of the message content and a signature verification indication to the recipient device;
- and
- providing certificate identifying information for the certificate to the recipient device for use by the recipient device in carrying out a further verification.
Non-transitory computer-readable media bearing code which, when executed by one or more processors of a computer system, cause the computer system to:
- receive, from a sender system external to the computer system, a message at the computer system for transmission to the recipient device, the message including message content, a digital signature, and a certificate of the sender, wherein the digital signature is calculated using a private key associated with the certificate of the sender and appended thereto by the sender system;
- verify the digital signature at the computer system using the certificate prior to the computer system providing any part of the message content and the certificate to the recipient device, wherein the sender system for appending the digital signature to the message is separate from the server for verifying the digital signature;
- and
- after the verifying,
- provide at least a portion of the message content and a signature verification indication to the recipient device;
- and
- provide certificate identifying information for the certificate to the recipient device for use by the recipient device in carrying out a further verification.
A server system for handling delivery of messages to a recipient device associated with the server system, the server system comprising:
- a server having at least one processor configured to:
- receive, from a sender system external to the server, a message for transmission to the recipient device, the message including message content, a digital signature, and a certificate of a sender, wherein the digital signature is calculated using a private key associated with the certificate of the sender and appended thereto by the sender system;
- verify the digital signature using the certificate prior to the server providing any part of the message content and the certificate to the recipient device, wherein the sender system for appending the digital signature to the message is separate from the server for verifying the digital signature;
- and
- after the verifying,
- provide at least a portion of the message content and a signature verification indication to the recipient device;
- and
- provide certificate identifying information for the certificate to the recipient device for use by the recipient device in carrying out a further verification.
Dependencies are inferred from the claim text.