Method for selectively enabling access to file systems of mobile terminals

A method of providing at least one user of a mobile terminal in a communication network with controlled access to files in a file system, comprising the steps of:

• configuring the files in said file system as a file body containing a file content and a file header containing content profile information identifying said file content;
• providing in said mobile terminal a security identity module and a secure agent;
• storing in said security identity module user profile information identifying a set of content profiles allowed for access to said file system by said at least one user;
• extracting, via said secure agent, said content profile information from the headers of the files in said file system;
• retrieving, via said secure agent, said user profile information stored in said security identity module;
• checking said user profile information and said content profile information for a possible match;
• providing said at least one user with access to the files in said file system for which said user profile information and said content profile information are found to match, wherein said file content in said file body is ciphered by means of a content key, comprising the steps of:
• running at least one trusted application on said mobile terminal;
• providing a software library comprising a set of functions for said at least one trusted application;
• and causing said secure agent, as a result of said step of checking, to send said content key to said software library, thereby enabling said at least one trusted application to access said file system.

A method of providing at least one user of a mobile terminal in a communication network with controlled access to files in a file system, comprising the steps of:

• configuring the files in said file system as a file body containing a file content and a file header containing content profile information identifying said file content;
• providing in said mobile terminal a security identity module and a secure agent;
• storing in said security identity module user profile information identifying a set of content profiles allowed for access to said file system by said at least one user;
• extracting, via said secure agent, said content profile information from the headers of the files in said file system;
• retrieving, via said secure agent, said user profile information stored in said security identity module;
• checking said user profile information and said content profile information for a possible match;
• and providing said at least one user with access to the files in said file system for which said user profile information and said content profile information are found to match, wherein the method further comprises causing at least one trusted application to create a new trusted file in said file system by the steps of:
• providing a software library comprising a set of functions for said at least one trusted application;
• creating a respective file header for said new trusted file as a function of given content profile information;
• sending said respective file header to said secure agent for ciphering;
• and said secure agent sending said ciphered respective file header to said software library, whereby said software library is enabled to fill file contents into said new trusted file.