Research in Motion Corporation

Blackberry Corporation

Evolutionq Inc.

James Andrew Godfrey

Wen Gao

Neil Patrick Adams

Herbert Anthony Little

Daryl Joseph Martin

Denny K Chiu

John Ferguson Wilson

Michael S Brown

Michael Kenneth Brown

Allan David Lewis

Marc Plumb

Herb A Little

Graeme Whittington

Michael Grant Kirkup

David Francis Tapuska

David Bajar

Timothy Richard Tyhurst

Carl Lloyd Cherry

Tabitha Ferguson

Thomas Owen Parry

Mihal Lazaridis

Gary P Mousseau

Arun Munje

Hugh R Hind

David Clark

Christopher Smith

Robbie John Maurice

J F Sean Wilson

Axel D Ferrazzini

Michal A Rybak

Roberto Diaz

Edward Dean

Pascal Gaudette

Norbert Lütkenhaus

Tabitha K Ferguson

Gerhard Dietrich Klassen

Steven Henry Fyke

David Paul Yach

Michael Shenfield

David Ryan Walker

Christopher Lyle Bender

Ian M Patterson

Richard John George

Matthew Bells

Thomas Leonard Trevor Plestid

Scott Douglas Rose

Nicholas Alfano

Barry W Linkert

Salim Omar

Bruno Richard Preiss

Brian Edward Anthony McColgan

Brian Edward McColgan

Graham Russell

Connor Patrick O'Rourke

Jason Lee Carter

Bill Yuan

Jie Zhu

Robert William Brown

Mahesh Babubhai Bhuta

Michele Mosca

Allen David Lewis

Thomas Leonard Plestid

Sebastian Reynaldo Verschoor

Fernando Guerrero

Thomas Leonard Trevor Plesid

Marco Piani

David R Clark

Salim Hayder Omar

David James Clarke

Salim H Omar

Axel Ferrazzini

Nicholas Patrick Alfano

Tabitha Kari Ferguson

Nicholas P Alfano

Connor Patrick O'rourke

David Anthony Bajar

Christopher David Smith

Sean Jf Wilson

Brian Edward Anthony Mccolgan

A system and method are provided for mitigating key-exhaustion attacks in a key exchange protocol. The method includes computationally confirming an exchange of key bits has provided fresh shared key material before information theoretically confirming the exchange of key bits has provided fresh shared key material, while maintaining synchronization between messaging parties. In one implementation, maintaining synchronization includes updating keys in between each post-processing message session and managing a local state of each messaging party in the key exchange protocol prior to sending a next post-processing message. In another implementation, maintaining synchronization includes hiding a message containing the information theoretic authenticator by executing a decoy authentication process, prior to using an information theoretical key.

System and method for mitigating key-exhaustion in a key distribution protocol

A system and method are described for proactively performing key swaps among nodes in a quantum key distribution (QKD) network. The method includes determining a routing solution for nodes in the QKD network; making the routing solution available to the nodes in the QKD network; and initiating key swaps among the nodes in the QKD network according to the routing solution, prior to key requests being made within the QKD network. The method can also include continuously performing key swaps among the nodes in the QKD network according to the routing solution; detecting a change in capacity and/or a change in demand on one or more links within the QKD network; determining a new routing solution based on the detected change; and continuously preforming subsequent key swaps according to the new routing solution.

System and method for optimizing the routing of quantum key distribution (QKD) key material in a network

A system and method are provided for proactively buffering quantum key distribution (QKD) key material. The method includes monitoring key generation rates and surpluses at QKD devices at each node of a QKD link in a QKD network, retrieving surplus key material from the QKD devices at one or both nodes of the QKD link, and buffering the surplus key material in a local storage at one or both nodes in the QKD link. The surplus key material can be used to offset overhead introduced in securely relaying keys between non-adjacent demand pairs in the QKD network. The surplus key material can also be used to offset future transient decreases in key generation rates.

System and method for proactively buffering quantum key distribution (QKD) key material

A system for controlling configuration settings for mobile data communication devices and services includes a redirection server and a policy generation system. The redirection server detects a triggering event in a host system and in response to the triggering event continuously redirects data items from the host system to a wireless network. Each mobile data communication device receives data items from the wireless network and includes a device configuration stored in a memory location on the mobile data communication device. The device configuration of each mobile data communication device controls one or more functions of the mobile data communication device. The policy generation system receives a policy setting from a user interface and stores the policy setting in a user information record associated with a mobile data communication device. The redirection server detects the policy setting in the user information record and in response to detecting the policy setting transmits the policy setting over the wireless network to the mobile data communication device associated with the user information record. The mobile data communication device automatically modifies the device configuration to include the policy setting. Methods of controlling a configuration setting in mobile data communication devices are also disclosed.

System and method for controlling configuration settings for mobile communication devices and services

A method, device and system for controlling a user device by a server. In one example, the user device comprises a plurality of applications, the method comprising: defining a set of application policy settings for the user device; and transmitting to the user device the application policy settings to control the management of at least one of the plurality of applications, wherein at least one of the application policy settings controls how at least one setting of the at least one of the plurality of applications may be user-configurable.

A method is disclosed for providing an updated management object to an agent. The method includes the agent specifying the updated management object, and a device management client providing the updated management object.

System and method for registration of an agent to process management object updates

A method for securely transferring a service from a first mobile device to a second mobile device, the service being associated with a server configured for facilitating provisioning of services to mobile devices over a wireless communications network. The method includes generating in the first mobile device a shared key, the shared key being generated using a master key unique to the server and to the first mobile device, the master key being accessible by the server and by the first mobile device; and sending said shared key from the first mobile device to the second mobile device using an alternate communication mechanism independent from the server.

Method of securely transferring services between mobile devices

A method and device to simplify message reply composition on a communications device, using a partially transparent overlay to allow a user to freely scroll and move around to other sections of a message or message chain while still being able to see and edit the reply being composed. When the reply is scrolled such that the composition field is not visible on the display screen, the device displays the overlay when the user enters text or on user request. The user may then type text into the overlay while viewing the underlying portion of the reply message, such as previous messages in the string.

Method and device to simplify message composition

A system for remotely controlling mobile communication devices includes a redirection system, a remote control system and a mobile data communication device. The redirection system detects a triggering event at a host system and in response to the triggering event continuously redirects data items from the host system to a wireless network. The mobile data communication device receives data items from the wireless network and executes a plurality of device operations. The remote control system receives control information from a user interface and transmits the control information through the redirection system to the wireless network. The control information is received and executed by the mobile data communication device to remotely control one or more of the device operations. Methods of controlling the operation of mobile data communication devices are also disclosed.

System and method for remotely controlling mobile communication devices

A method for implementing policy settings in a user device comprising a plurality of applications, wherein the policy settings comprise at least one application policy setting for managing at least one of the plurality of applications and at least one client policy setting for managing the user device, the method comprising determining a set of policy settings for the user device, providing an update of the policy settings and causing implementation of the policy settings by the user device, to control management of the at least one of the plurality of applications and management of the user device.

An apparatus, and an associated method, for providing secured effectuation of a communication service at a substitute mobile station. A user desiring temporarily to use a substitute mobile station to carry out the communication service initiates a request at the mobile station for its use. The communication service is available to be performed at the substitute mobile station for a selected period. Upon termination of the selected period, the communication service session ends, and data associated with the communication service session is deleted from the substitute mobile station.

Apparatus, and an associated method, by which to activate a wireless device for a temporary period

A method and apparatus for tracking device management data changes comprising storing information related to modification to device management data wherein the device management data is stored in an Open Mobile Alliance (OMA) compliant device management tree of Managed Objects (MO).

Method and apparatus for tracking device management data changes

A communication system exchanges key generation parameters for secure communications. An internet service and communications device of a user are in communication with each other. The internet service includes an account authentication mechanism for a user and includes a database having stored cryptographic keys and key generation parameters. A device client operates on the communications device and initiates a request to the internet service that authenticates the user and establishes a secure communications channel between the internet service and communications device and determines key generation parameters based on an authenticated user identifier and transmits the key generation parameters for initiating key generation and securely establishing a cryptographic key between the internet service and communications device.

System and method for exchanging key generation parameters for secure communications

A system and method are provided for pre-processing encrypted and/or signed messages at a host system before the message is transmitted to a wireless mobile communication device. The message is received at the host system from a message sender. There is a determination as to whether any of the message receivers has a corresponding wireless mobile communication device. For each message receiver that has a corresponding wireless mobile communication device: the message is processed so as to modify the message with respect to encryption and/or authentication aspect. The processed message is transmitted to a wireless mobile communication device that corresponds to the first message receiver. The system and method may include post-processing messages sent from a wireless mobile communications device to a remote system. Authentication and/or encryption message processing is performed upon the message. The processed message may then be sent through the remote system to one or more receivers.

System and method for compressing secure E-mail for exchange with a mobile data communication device

Growing community of inventors

Waterloo, Canada

James Andrew Godfrey