Research in Motion Corporation

Blackberry Corporation

Certicom Corporation

Citrix Systems International Gmbh

Sera4 Ltd.

Other

Huawei Technologies Co., Limited

Research in Motion (tx Office)

Herbert Anthony Little

Neil Patrick Adams

Michael S Brown

Michael Kenneth Brown

Michael Grant Kirkup

David Paul Yach

Russell Norman Owen

Scott William Totzke

Ian M Robertson

David Francis Tapuska

James Andrew Godfrey

Stefan Erik Janhunen

David Victor MacFarlane

Jonathan F Hammell

Michael Shenfield

Christopher Lyle Bender

Mihal Lazaridis

Scott Douglas Rose

Christopher Pattenden

Michael Edwin McCallum

Anthony Fabian Scian

Dinah Lea Marie Davis

Dale J Hobbs

Steven Henry Fyke

Matthew John Campagna

Richard C Madter

Christopher Simon Book

Jerrold Richard Randell

Jonathan Quinn Brubacher

Ryan Jeffrey Hickey

Scott Alexander Vanstone

Kevin Howard Orr

Salim Omar

David Clark

Timothy Richard Tyhurst

Martin George Albert Guthrie

Carl Lloyd Cherry

John Fredric Arthur Dahms

Tomasz K Rybak

Jason Tyler Griffin

Ravi Singh

Daniel Richard L Brown

Craig Allan Dunk

Hugh R Hind

Van Quy Tu

John F A Dahms

Michael Hung

Jerod D Klink

Dinah L M Davis

Gerhard Dietrich Klassen

Andrew Douglas Bocking

Harry Richmond Major

Lyall Kenneth Winger

Allan David Lewis

Ian M Patterson

John A Holmes

Brindusa L Fritsch

Ryan Mitchell Bayne

Richard Paul Sibley

George V Babu

Andrew Ashraf Fergusson

Anthony Rosati

Michael Hin Kai Hung

Benjamin William Boomhour

Christopher E S Pattenden

Theban Ganeshalingam

Albert Hecht-Enns

Gerald Winton Lankford

David Thornton

Gary P Mousseau

Raymond Paul Vander Veen

Viera Bibr

Barry J Gilhuly

Kamen B Vitanov

Kwok Ching Leung

Alexander Sherkin

Vahid Moosavi

Terrill Mark Dent

Alexander Truskovsky

Chris K C Leung

Alain Rene Gagne

David Andrew Brown

Chris Wormald

Daniel R L Brown

Laura Doktorova

Martin G Guthrie

Kristof Takacs

Graham Russell

Srimantee Karmakar

Connor Patrick O'Rourke

Sean Alexander Courtney

Sean Paul Taylor

Dinah Davis

Jerome Lang

Michal Andrzej Rybak

Marcel Luis Celaya

Nicholas Andrew Begley

Michael Rybak

Melissa Adams

Gerald Winton Lankford, Jr

A method and system share data amongst a group of a plurality of mobile devices without requiring a database or server to centrally store the shared data. The shared data is instead stored by each group member individually while controlling the manner in which the shared data is updated. To manage updates, the shared data is atomized such that individual databases in the shared data are separated or otherwise delineated into one or more records. To maintain a common copy of the shared data at each device, any update is sent to all group members using an intermediate message exchange service that is capable of transmitting a sent message to more than one recipient if necessary. In this way, the updates are multicast to the group. To manage the content of the shared data, each update comprises one or more changes to a current copy of a corresponding record.

System and method for managing items in a list shared by a group of mobile devices

Systems and methods for managing data transfers between a secure location and a less secure location. A data transfer checker operating on a mobile device determines whether an attempted data transfer between two locations is permitted. If it is not permitted, then the data transfer is prevented and the user may be notified of the data transfer prevention.

System and method for handling data transfers

Systems and methods for establishing a data connection between a mobile device and a peripheral. The mobile device is configured to determine whether to handle user approval of the data connection between the mobile device and the peripheral. Through the mobile device, an input mechanism is provided for the user to provide input. The input is used in determining whether to approve the data connection between the mobile device and the peripheral.

System and method for handling peripheral connections to mobile devices

Embodiments of the systems, devices and methods described herein generally facilitate performing Bluetooth pairing between a first device and a second device. In accordance with one example embodiment, a first device generates a barcode that encodes Bluetooth pairing data for transmission to the second device, wherein the pairing data comprises a Bluetooth address associated with the first device, and wherein the pairing data further comprises a personal identification number usable to complete the Bluetooth pairing, the barcode is transmitted to the second device, and Bluetooth pairing is performed with the second device.

Methods and devices for facilitating bluetooth pairing using a camera as a barcode scanner

Digital certificates are signed by a server's private key and installed at lock controllers that restrict access to physical resources. The server's public key is distributed to lock controllers and to mobile electronic devices operated by users who are given access to the physical resources. Lock-access data is digitally signed by the server's private key and provided to mobile electronic devices to facilitate access. The lock controller validates lock-access data and grants access conditionally based on time, version, and/or identity data provided within lock-access data. The use of certificates reduces the need to rely on a security scheme specific to the network. Lock controllers can also broadcast status notifications, so that updates and log data can be securely communicated with the server using mobile electronic devices as a proxy. The system is highly scalable, as each lock controller need not track the full scope of access permissions.

Secure access to physical resources using asymmetric cryptography

A novel code signing system, computer readable media, and method are provided. The code signing method includes receiving a code signing request from a requestor in order to gain access to one or more specific application programming interfaces (APIs). A digital signature is provided to the requestor. The digital signature indicates authorization by a code signing authority for code of the requestor to access the one or more specific APIs. In one example, the digital signature is provided by the code signing authority or a delegate thereof. In another example, the code signing request may include one or more of the following: code, an application, a hash of an application, an abridged version of the application, a transformed version of an application, a command, a command argument, and a library.

Code signing system and method

A system and method for selectively securing data from unauthorized access on a client device storing a plurality of data types with reference to an authorization level indicated in a command. A command is received at a client device comprising an authorization level indicator. Based on at least one predefined rule, which may be implemented in an IT policy stored at the client device, each of the plurality of data types to be secured is determined, and then the data corresponding to those types is secured. The data may be secured by encrypting and/or deleting the data at the client device. The predefined rules associated with each authorization level may be configured by a user or administrator having an authorization level that exceeds the associated authorization level.

Selectively wiping a remote device

Systems and methods for secure control of a wireless mobile communication device are disclosed. Each of a plurality of domains includes at least one wireless mobile communication device asset. When a request to perform an operation affecting at least one of the assets is received, it is determined whether the request is permitted by the domain that includes the at least one affected asset, by determining whether the entity with which the request originated has a trust relationship with the domain, for example. The operation is completed where it is permitted by the domain. Wireless mobile communication device assets include software applications, persistent data, communication pipes, and configuration data, properties or user or subscriber profiles.

System and method for secure control of resources of wireless mobile communication devices

Methods and systems for performing garbage collection involving sensitive information on a mobile device are described herein. Secure information is received at a mobile device over a wireless network. The sensitive information is extracted from the secure information. A software program operating on the mobile device uses an object to access the sensitive information. Secure garbage collection is performed upon the object after the object becomes unreachable.

Secure garbage collection on a mobile device

This disclosure relates to management of privileges associated with applications accessible by users of electronic devices. In one aspect, an electronic device detects that a privilege has been revoked, shuts down any application running on the electronic device that has previously accessed the privilege, and restarts any application that was shut down, the restarted application no longer having any access to the revoked privilege. In another aspect, an electronic device keeps a log of which applications have previously accessed which privileges, receives a new set of privileges associated with applications, determines that a privilege has been revoked, and if the log indicates that an application previously accessed the privilege, resets the electronic device. In a further aspect, a method sets privileges associated with applications, records which electronic devices have which applications, revokes a privilege, and instructs those electronic devices having applications to which the privilege is associated to reset themselves.

Privilege management and revocation

Systems and methods for processing encoded messages within a wireless communications system are disclosed. A server within the wireless communications system performs signature verification of an encoded message and provides, together with the message, an indication to the mobile device that the message has been verified. In addition, the server provides supplemental information, such as, for example, a hash of the certificate or certificate chain used to verify the message, to the device, to enable the device to perform additional checks on the certificate, such as, for example, validity checks, trust checks, strength checks, or the like.

System and method for updating message trust status

Growing community of inventors

Waterloo, Canada

Herbert Anthony Little