Back to results
US 8,788,809 B2Granted
Method and apparatus to create a secure web-browsing environment with privilege signing
AssigneeQUALCOMM Incorporated
InventorBrian H. Kelley
Life of this patent
Estimating the term…
Abstract
Devices and methods use digital certificates and digital signatures to enable computing devices, such as mobile devices, to trust a server attempting to access a resource on the computing device. The server may present the computing device with a digital certificate issued by a trusted third party which includes information so that the computing device can determine which resources the server should be trusted to access. The computing device can determine that the digital certificate was issued by a trusted third party by examining the chain of digital certificates that may link the server with an inherently trusted authority.
Claims56
A method for executing a client-server application on a mobile device, comprising:
- receiving from a server a script for execution on the mobile device, wherein the received script requests access to a first mobile device resource;
- receiving, on the mobile device, a digital certificate issued to the server, wherein the digital certificate contains a list of mobile device resources for which the server has been granted permission;
- verifying the digital certificate and confirming that the script has not been modified since the digital certificate was created;
- determining whether the first mobile device resource is identified in the list of mobile device resources for which the server has been granted permission;
- and
- allowing access by the server to the first mobile device resource in response to determining that the first mobile device resource is identified in the list of mobile device resources for which the server has been granted permission that is contained in the digital certificate, wherein allowing access comprises:
- enabling the script to access the first mobile device resource;
- and
- transmitting to the server data relating to the first mobile device resource.
6 more elements
A mobile device, comprising:
- a processor;
- a transceiver coupled to the processor;
- and
- a memory coupled to the processor;
- wherein the processor is configured with software instructions to perform steps comprising:
- receiving from a server a script for execution on the mobile device, wherein the received script requests access to a first mobile device resource;
- receiving a digital certificate issued to the server, wherein the digital certificate contains a list of mobile device resources for which the server has been granted permission;
- verifying the digital certificate and confirming that the script has not been modified since the digital certificate was created;
- determining whether the first mobile device resource is identified in the list of mobile device resources for which the server has been granted permission;
- and
- allowing access by the server to the first mobile device resource in response to determining that the first mobile device resource is identified in the list of mobile device resources for which the server has been granted permission that is contained in the digital certificate, wherein allowing access comprises:
- enabling the script to access the first mobile device resource;
- and
- transmitting to the server data relating to the first mobile device resource.
11 more elements
A non-transitory storage medium having stored thereon processor-executable software instructions configured to cause a mobile device processor to perform steps comprising:
- receiving from a server a script for execution on a mobile device, wherein the received script requests access to a first resource of the mobile device;
- receiving a digital certificate issued to the server, wherein the digital certificate contains a list of mobile device resources for which the server has been granted permission;
- verifying the digital certificate and confirming that the script has not been modified since the digital certificate was created;
- determining whether the first resource of the mobile device is identified in the list of mobile device resources for which the server has been granted permission;
- and
- allowing access by the server to the first mobile device resource in response to determining that the first mobile device resource is identified in the list of mobile device resources for which the server has been granted permission that is contained in the digital certificate, wherein allowing access comprises:
- enabling the script to access the first mobile device resource;
- and
- transmitting to the server data relating to the first mobile device resource.
6 more elements
A mobile device, comprising:
- means for receiving from a server a script for execution on the mobile device, wherein the received script requests access to a first mobile device resource;
- means for receiving a digital certificate issued to the server, wherein the digital certificate contains a list of mobile device resources for which the server has been granted permission;
- means for verifying the digital certificate and confirming that the script has not been modified since the digital certificate was created;
- means for determining whether the first mobile device resource is identified in the list of mobile device resources for which the server has been granted permission;
- and
- means for allowing access by the server to the first mobile device resource in response to determining that the first mobile device resource is identified in the list of mobile device resources for which the server has been granted permission that is contained in the digital certificate, wherein means for allowing access by the server comprises:
- means for enabling the script to access the first mobile device resource;
- and
- means for transmitting to the server data relating to the first mobile device resource.
6 more elements
A method for executing a client-server application on a mobile device, comprising:
- receiving from a server a script for execution on the mobile device, wherein the received script requests access to a protected resource of the mobile device;
- verifying that the server from which the script was received is named in a certificate;
- identifying permissions that have been granted to the server according to the contents of the certificate;
- determining whether a permission associated with the protected resource of the mobile device is included in the identified permissions that have been granted to the server;
- and
- allowing access by the server to the protected resource of the mobile device in response to determining, based on the contents of the certificate, that a permission associated with the protected resource is included in the identified permissions that have been granted to the server, wherein allowing access comprises:
- enabling the script to access the protected resource of the mobile device;
- and
- transmitting to the server data relating to the protected resource.
6 more elements
A mobile device, comprising:
- a processor;
- a transceiver coupled to the processor;
- and
- a memory coupled to the processor;
- wherein the processor is configured with software instructions to perform steps comprising:
- receiving from a server a script for execution on the mobile device, wherein the received script requests access to a protected resource of the mobile device;
- verifying that the server from which the script was received is named in a certificate;
- identifying permissions that have been granted to the server according to the contents of the certificate;
- determining whether a permission associated with the protected resource of the mobile device is included in the identified permissions that have been granted to the server;
- and
- allowing access by the server to the protected resource of the mobile device in response to determining, based on the contents of the certificate, that a permission associated with the protected resource is included in the identified permissions that have been granted to the server, wherein allowing access comprises:
- enabling the script to access the protected resource of the mobile device;
- and
- transmitting to the server data relating to the protected resource.
11 more elements
A tangible non-transitory storage medium having stored thereon processor-executable software instructions configured to cause a processor of a mobile device to perform steps comprising:
- receiving from a server a script for execution on the mobile device, wherein the received script requests access to a protected resource of the mobile device;
- verifying that the server from which the script was received is named in a certificate;
- identifying permissions that have been granted to the server according to the contents of the certificate;
- determining whether a permission associated with the protected resource of the mobile device is included in the identified permissions that have been granted to the server;
- and
- allowing access by the server to the protected resource of the mobile device in response to determining, based on the contents of the certificate, that a permission associated with the protected resource is included in the identified permission that have been granted to the server, wherein allowing access comprises:
- enabling the script to access the protected resource of the mobile device;
- and
- transmitting to the server data relating to the protected resource.
6 more elements
A mobile device, comprising:
- means for receiving from a server a script for execution on the mobile device, wherein the received script requests access to a protected resource of the mobile device;
- means for verifying that the server from which the script was received is named in a certificate;
- means for identifying permissions that have been granted to the server according to the contents of the certificate;
- means for determining whether a permission associated with the protected resource of the mobile device is included in the identified permissions that have been granted to the server;
- and
- means for allowing access by the server to the protected resource of the mobile device in response to determining, based on the contents of the certificate, that a permission associated with the protected resource is included in the identified permissions that have been granted to the server, wherein means for allowing access comprises:
- means for enabling the script to access the protected resource of the mobile device;
- and
- means for transmitting to the server data relating to the protected resource.
6 more elements
Dependencies are inferred from the claim text.