# US 2013/0159526 A1 · Method of handling access control information and related communication device > Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt - Number: US 2013/0159526 A1 - Document ID: US20130159526A1 - Status: Published application - Kind: A1 - Application number: 13/721,061 - Filed: 2012-12-20 - Published: 2013-06-20 - Earliest claimed: 2011-12-20 - Assignees: HTC Corporation - Inventors: Chun-Ta Yu; Yin-Yeh Tseng - Web page: https://patentgrep.com/patent/US20130159526A1 ## CPC - H04L 41/28: Restricting access to network management systems or functions, e.g. using authorisation function to access network configuration - H04L 63/101: {Access control lists [ACL]} - H04L 67/125: involving control of end-device applications over a network - H04W 12/08: Access security - H04W 12/37: Managing security policies for mobile devices or for controlling mobile applications - H04L 41/0233: Object-oriented techniques, for representation of network management data, e.g. common object request broker architecture [CORBA] - H04L 41/0813: characterised by the conditions triggering a change of settings - H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M) - H04W: WIRELESS COMMUNICATION NETWORKS (broadcast communication H04H; communication systems using wireless links for non-selective communication, e.g. wireless extensions H04M1/72) ## Abstract A method of handling access control information of a management object in a device management (DM) client of a service system is disclosed. The method comprises creating a management tree for storing the access control information of the management object; arranging a first node in the management tree, for storing an identifier of the management object; arranging a second node in the management tree, for storing an identifier of a DM server of the service system; arranging a third node in the management tree, for storing a path of a node in the management object; and arranging a fourth node in the management tree, for storing access right of the DM server related to the node. ## Claims ### Claim 1 A method of handling access control information of a first management object in a device management (DM) client of a service system, the method comprising: creating a management tree for storing the access control information of the first management object; arranging a first node in the management tree, for storing an identifier of the first management object; arranging a second node in the management tree, for storing an identifier of a first DM server of the service system; arranging a third node in the management tree, for storing a path of a node in the first management object; and arranging a fourth node in the management tree, for storing access right of the first DM server related to the node. ### Claim 2 (depends on 1) The method of claim 1, wherein after receiving a message transmitted by a second DM server of the service system, the DM client determines whether a path in the message is valid according to the path in the third node. ### Claim 3 (depends on 2) The method of claim 2, wherein the DM client determines whether to grant a DM command in the message according to the access right in the fourth node after determining that the path is valid, and the DM client rejects the message after determining that the message is not valid. ### Claim 4 (depends on 3) The method of claim 3, wherein when the access right comprises the DM command and an identifier of the second DM server, the DM client grants the DM command in the message. ### Claim 5 (depends on 1) The method of claim 1, wherein after receiving a message transmitted by a second DM server of the service system, the DM client determines whether an identifier of a second management object corresponding to a path in the message is valid according to the identifier in the first node. ### Claim 6 (depends on 5) The method of claim 5, wherein the DM client determines whether an identifier of the second DM server is valid according to the identifier in the second node after determining that the identifier of the second management object is valid, and the DM client rejects the message after determining that the identifier of the second management object is not valid. ### Claim 7 (depends on 6) The method of claim 6, wherein the DM client determines whether the path in the message is valid according to the path in the third node after determining that the identifier of the second server is valid, and the DM client rejects the message after determining that the identifier of the second server is not valid. ### Claim 8 (depends on 7) The method of claim 7, wherein the DM client determines whether to grant a DM command in the message according to the access right in the fourth node after determining that the path in the message is valid, and the DM client rejects the message after determining that the path in the message is not valid. ### Claim 9 (depends on 8) The method of claim 8, wherein the DM client grants the DM command if behavior of the DM command is the same as the access right in the fourth node, and the DM client rejects the message if the behavior of the DM command is not the same as the access right in the fourth node. ### Claim 10 (depends on 9) The method of claim 9, wherein the DM client determines whether the message is valid according to management object (MO)-level access right of the first management object described according to the DM protocol 2.0, before rejecting the message. ### Claim 11 (depends on 5) The method of claim 5, wherein the DM client starts to check the identifier of the second management object after determining that the message is not valid according to MO-level access right of the first management object described according to the DM protocol 2.0, and the DM client does not start to check the identifier of the second management object and grants a DM command in the message after determining that the message is valid according to the MO-level access right. ### Claim 12 (depends on 1) The method of claim 1, wherein the management tree and the four nodes are created, when the DM client is upgraded from the DM protocol 1.x to the DM protocol 2.0. ### Claim 13 (depends on 1) The method of claim 1, wherein the management tree and the four nodes are created by the first DM server, and are transmitted to the DM client. ### Claim 14 (depends on 1) The method of claim 1, wherein the management tree and the four nodes are created by the DM client. ### Claim 15 (depends on 1) The method of claim 1, wherein the management tree and the four nodes are created according to the DM protocol 2.0 or later versions, for storing the access control information created according to the DM protocol 1.x.