# US 2013/0160091 A1 · System and method for associating message addresses with certificates > Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt - Number: US 2013/0160091 A1 - Document ID: US20130160091A1 - Status: Published application - Kind: A1 - Application number: 13/766,068 - Filed: 2013-02-13 - Published: 2013-06-20 - Earliest claimed: 2005-06-24 - Assignees: Research In Motion Limited - Inventors: Neil Patrick Adams; Michael Stephen Brown; Herbert Anthony Little - Web page: https://patentgrep.com/patent/US20130160091A1 ## CPC - H04L 63/0823: {using certificates (cryptographic mechanisms or cryptographic arrangements for entity authentication involving certificates H04L9/3263)} - H04L 9/3265: {using certificate chains, trees or paths; Hierarchical trust model} - H04L 51/48: Message addressing, e.g. address format or anonymous messages, aliases - H04L 51/58: Message adaptation for wireless communication - H04L 63/0428: {wherein the data content is protected, e.g. by encrypting or encapsulating the payload} - H04W 12/02: Protecting privacy or anonymity, e.g. protecting personally identifiable information [PII] - H04W 12/033: of the user plane, e.g. user's traffic - H04W 12/06: Authentication - H04L 2209/80: Wireless - H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M) - H04W: WIRELESS COMMUNICATION NETWORKS (broadcast communication H04H; communication systems using wireless links for non-selective communication, e.g. wireless extensions H04M1/72) ## Abstract A system and method for associating message addresses with certificates, in which one or more message addresses are identified and associated with a user-selected certificate that does not contain any e-mail addresses. In certain situations, a message may be encrypted using a certificate that does not contain an e-mail address that matches the e-mail address of the individual to which the message is to be sent, so long as the address to which the message is to be sent matches any of the message addresses associated with the certificate. The message addresses are saved in a data structure that resides in a secure data store on a computing device, such as a mobile device. ## Claims ### Claim 1 A method of associating message addresses with digital certificates, the method comprising: receiving, by a device, first input data identifying a user-selected certificate; receiving, by the device, second input data identifying one or more message addresses to be associated with the user-selected certificate; receiving an authorization to associate the one or more message addresses with the user-selected certificate; and in response to the authorization, associating, by the device, the one or more message addresses with the user-selected certificate, by saving the one or more message addresses in a data structure residing in a data store on the device. ### Claim 2 (depends on 1) The method of claim 1, wherein the data structure is stored in a secure data store on the device. ### Claim 3 (depends on 2) The method of claim 2, wherein the user-selected certificate is stored in the secure data store. ### Claim 4 (depends on 1) The method of claim 1, further comprising encrypting a message with the user-selected certificate, wherein the message address to which the message is to be sent matches any one of the message addresses associated with the user-selected certificate. ### Claim 5 (depends on 1) The method of claim 1, further comprising verifying the digital signature on a message received from a sender with the user-selected certificate, wherein the message address of the sender from which the message is received matches any one of the message addresses associated with the user-selected certificate. ### Claim 6 (depends on 2) The method of claim 2, wherein the authorization is required to be received before at least one of the operations selected from the following group is performed: i) saving one or more new message addresses in the data structure; ii) modifying one or more message addresses saved in the data structure; and iii) deleting one or more message addresses saved in the data structure. ### Claim 7 (depends on 6) The method of claim 6, wherein the secure data store is protected by at least one password, such that the authorization is received when the at least one password is correctly input. ### Claim 8 (depends on 1) The method of claim 1, further comprising displaying a list of message addresses saved in the data structure. ### Claim 9 (depends on 1) The method of claim 1, further comprising displaying a list of certificates from which the user-selected certificate is identified, prior to receiving the first input data. ### Claim 10 (depends on 1) The method of claim 1, further comprising displaying a list of message addresses from which the one or more message addresses are identified, prior to receiving the second input data. ### Claim 11 (depends on 1) The method of claim 1, wherein the device comprises a mobile device. ### Claim 12 (depends on 1) The method of claim 1, wherein the device comprises a desktop computer, and wherein the method further comprises synchronizing the desktop computer with a mobile device so that the data structure is saved in a data store on the mobile device. ### Claim 13 (depends on 1) The method of claim 1, wherein the user-selected certificate is a digital certificate that contains no message addresses. ### Claim 14 (depends on 1) The method of claim 1, wherein the user-selected certificate is a digital certificate that contains one or more primary message addresses. ### Claim 15 (depends on 1) The method of claim 1, wherein the second input data is provided as user input. ### Claim 16 (depends on 1) The method of claim 1, wherein the second input data is extracted from an LDAP record. ### Claim 17 A non-transitory computer-readable storage medium upon which a plurality of computer-executable instructions are stored, the instructions when executed, cause a processor of a device to perform a method of associating message addresses with digital certificates, the method comprising: receiving first input data identifying a user-selected certificate; receiving second input data identifying one or more message addresses to be associated with the user-selected certificate; receiving an authorization to associate the one or more message addresses with the user-selected certificate; and in response to the authorization, associating the one or more message addresses with the user-selected certificate, by saving the one or more message addresses in a data structure residing in a data store on the device. ### Claim 18 A system for associating message addresses with digital certificates identified at a mobile device, and wherein the system comprises a desktop computer and the mobile device connectable thereto, and wherein the desktop computer comprises a processor configured to: receive first input data identifying a user-selected certificate; receive second input data identifying one or more message addresses to be associated with the user-selected certificate; receive an authorization to associate the one or more message addresses with the user-selected certificate; and in response to the authorization, associate the one or more message addresses with the user-selected certificate, by saving the one or more message addresses in a data structure residing in a data store on the desktop computer; and synchronize with the mobile device so that the one or more message addresses identified by the second input data is saved in a second data structure residing in a data store on the mobile device. ### Claim 19 (depends on 18) The system of claim 18, wherein the processor of the desktop computer is configured to copy the user-selected certificate for transmission to the mobile device, so that the user-selected certificate is savable to the data store on the mobile device. ### Claim 20 A computing device for associating message addresses with digital certificates, the computing device comprising a processor, the processor configured to: receive first input data identifying a user-selected certificate; receive second input data identifying one or more message addresses to be associated with the user-selected certificate; receive an authorization to associate the one or more message addresses with the user-selected certificate; and in response to the authorization, associate the one or more message addresses with the user-selected certificate, by saving the one or more message addresses in a data structure residing in a data store on the computing device. ### Claim 21 (depends on 20) The computing device of claim 20, wherein the data structure is stored in a secure data store on the device. ### Claim 22 (depends on 21) The computing device of claim 21, wherein the user-selected certificate is stored in the secure data store. ### Claim 23 (depends on 20) The computing device of claim 20, wherein the processor is further configured to encrypt a message with the user-selected certificate, wherein the message address to which the message is to be sent matches any one of the message addresses associated with the user-selected certificate. ### Claim 24 (depends on 20) The computing device of claim 20, wherein the processor is further configured to verify the digital signature on a message received from a sender with the user-selected certificate, wherein the message address of the sender from which the message is received matches any one of the message addresses associated with the user-selected certificate. ### Claim 25 (depends on 21) The computing device of claim 21, wherein the authorization is required to be received before at least one of the operations selected from the following group is performed: i) saving one or more new message addresses in the data structure; ii) modifying one or more message addresses saved in the data structure; and iii) deleting one or more message addresses saved in the data structure. ### Claim 26 (depends on 25) The computing device of claim 25, wherein the secure data store is protected by at least one password, such that the authorization is received when the at least one password is correctly input. ### Claim 27 (depends on 20) The computing device of claim 20, wherein the processor is further configured to display a list of message addresses saved in the data structure on a display of the computing device. ### Claim 28 (depends on 20) The computing device of claim 20, wherein the processor is further configured to display, on a display of the computing device, a list of certificates from which the user-selected certificate is identified, prior to receiving the first input data. ### Claim 29 (depends on 20) The computing device of claim 20, wherein the processor is further configured to display, on a display of the computing device, a list of message addresses from which the one or more message addresses are identified, prior to receiving the second input data. ### Claim 30 (depends on 20) The computing device of claim 20, wherein the computing device is a mobile device. ### Claim 31 (depends on 20) The computing device of claim 20, wherein the computing device is a desktop computer, and wherein the processor is further configured to synchronize the desktop computer with a mobile device so that the data structure is saved in a data store on the mobile device. ### Claim 32 (depends on 20) The computing device of claim 20, wherein the user-selected certificate is a digital certificate that contains no message addresses. ### Claim 33 (depends on 20) The computing device of claim 20, wherein the user-selected certificate is a digital certificate that contains one or more primary message addresses. ### Claim 34 (depends on 20) The computing device of claim 20, wherein the second input data is provided as user input. ### Claim 35 (depends on 20) The computing device of claim 20, wherein the second input data is extracted from an LDAP record.