Safe application distribution and execution in a wireless environment

A system for processing and distributing an application for use on a wireless device communicating over a wireless network, comprising:

• a carrier network;
• an infrastructure for supporting the wireless network, coupled to said carrier network;
• and
• a server, coupled to said carrier network, and configured to:
• receive the application and a first identification information associated with the application, said application being independent of any act for performing wireless communication between the wireless device and the wireless network, said first identification information being usable to confirm an identity of a source of the application;
• determine that the application satisfies each criterion in a set of predetermined criteria, wherein at least one criterion in the set of predetermined criteria is established by a managing authority for a managed environment;
• after said determination,
• assign a set of permissions to the application, each permission in the set of permissions being associated with a respective criterion in said set of predetermined criteria;
• and
• transmit the application and the set of permissions to the wireless device.

A system for processing and distributing an application for use on a wireless device communicating over a wireless network, comprising:

• a carrier network means;
• an infrastructure means for supporting the wireless network, coupled to said carrier network;
• and
• a server means, coupled to said carrier network means, the server means comprising:
• a means for receiving the application and a first identification information associated with the application, said application being independent of any act for performing wireless communication between the wireless device and the wireless network, said first identification information being usable to confirm an identity of a source of the application;
• a means for determining that the application satisfies each criterion in a set of predetermined criteria, wherein at least one criterion in the set of predetermined criteria is established by a managing authority for a managed environment;
• a means for assigning a set of permissions to the application, each permission in the set of permissions being associated with a respective criterion in said set of predetermined criteria;
• and
• a means for transmitting the application and the set of permissions to the wireless device.

A method of processing an application for execution on a wireless device communicating over a wireless network, comprising:

• receiving, from a server over the wireless network, a transmission comprising the application and a set of permissions;
• determining, based upon evaluating a rule previously stored in the wireless device on said set of permissions, whether to enable the application for execution on the wireless device;
• executing the application if the application has been enabled for execution;
• and
• disabling the application if the application has not been enabled for execution on the wireless device.

A wireless device which communicates over a wireless network and is capable of executing an application, comprising:

• a wireless interface for receiving the application and a set of permissions, the application being independent of any act for performing wireless communication between the wireless device and the wireless network;
• and
• a computer platform coupled to said wireless interface, said computer platform comprising a first storage for storing a previously defined rule, and a second storage for storing the application, the set of permissions, and the identification information,
• wherein the computer platform is configured to determine, based upon evaluating one or more rules against the set of permissions:
• whether to enable the application for execution on the wireless device;
• and
• whether to enable the application for execution in the wireless network;
• the computer platform being further configured to:
• execute the application if the application has been enabled for execution;
• and
• remove the application if the application has not been enabled for execution.

A wireless device which communicates over a wireless network and is capable of executing an application, comprising:

• a wireless interface means for receiving the application, a set of permissions, and an identification information, the application being independent of any act for performing wireless communication between the wireless device and the wireless network;
• and
• a computer platform means, coupled to said wireless interface, said computer platform means comprising:
• a first storage means for storing one or more previously defined rules;
• a second storage means for storing the application, the set of permissions, and the identification information;
• a means for determining, based upon evaluating at least one rule against the set of permissions whether to enable the application for execution on the wireless device and whether to enable the application for execution in the wireless network;
• a means for executing the application if the application has been enabled for execution on the wireless device and in the wireless network;
• and
• a means for disabling the application if the application has not been enabled for execution either on the wireless device or in the wireless network.