Blackberry Corporation

2236008 Ontario Limited

Symantec Corporation

Oliver Whitehouse

Christopher Lyle Bender

Geordon Thomas Ferguson

Alberto Daniel Zubiri

Kenneth Cyril Schneider

Christopher William Lewis Hobbs

Michael Kenneth Brown

Michael Grant Kirkup

Neil Patrick Adams

Oliver Friedrichs

Robert Henderson Wood

Van Quy Tu

Daniel Jonas Major

Roger Paul Bowman

Michael Edwin McCallum

Elias Levy

Benjamin Winston

Christopher William Hobbs

In some implementations, a method of managing access to resources in a single device including receiving, from a first resource assigned to a first perimeter, a request to access a second resource assigned to a second perimeter different from the first perimeter. The single device includes the first perimeter and the second perimeter. Whether access to the second resource is prohibited is determined based on a management policy for the first perimeter. The management policy defining one or more rules for accessing resources assigned to the second perimeter including the second resource.

Managing access to resources

In some implementations, a method for managing data in a user device includes pushing first metadata for a first resource in a first perimeter to a service external to the first perimeter. The first perimeter is configured to prevent external resources from accessing resources in the first perimeter. Second metadata for a second resource in a second perimeter is pushed to the external service. The external service is external to the second perimeter, the second perimeter being configured to prevent external resources from accessing resources in the second perimeter. Information is presented to the user based on a combination of the first metadata and the second metadata.

Presenting metadata from multiple perimeters

Managing cross perimeter access

Methods and systems for mitigating the effects of a malicious software application are disclosed. A dedicated module on the computing device receives from a malicious software detector a message indicating whether the application is malicious or has a malicious component. The dedicated module obtains a set of permissions to be granted to the application, and instructs software on the computing device that controls the permissions of the application to grant the set of permissions.

System and method for controlling applications to mitigate the effects of malicious software

An apparatus, and an associated method, facilitates security at a wireless device, such as a wireless device comprising a mobile computing platform. A security decision engine is provided that monitors for an event necessitating a security decision. When a security decision is required, request is made of a knowledge fetcher, provided by a trusted third-party, installed at the wireless device for the security decision. The knowledge fetcher obtains the security decision, such as by obtaining the security decision from a remote, trusted third-party server, and provides the security decision to the decision engine. Use is made of the security decision pursuant to a setting for which the security decision is needed.

Apparatus, and an associated method, for facilitating secure operations of a wireless device

Normally, at the time of manufacturing, security may be provided to a device being manufactured through the loading of an operating system that has been cryptographically signed. The present application discloses a 'factory mode' for the device. The 'factory mode' allows the device to execute untrusted operating system code, such as unsigned operating system code and operating system code that has been signed, but the certificate authority is not trusted. To support execution of untrusted operating system code in a secure manner, the device may be adapted to prevent data of predetermined type from being loaded on the device while the device is in the &#x201c;factory mode&#x201d;. In contrast to the &#x201c;factory mode&#x201d;, the secure mode of the device is referred to herein as a &#x201c;product mode&#x201d;. There develops a need to manage, in a secure manner, transitions between the &#x201c;product mode&#x201d; and the &#x201c;factory mode&#x201d;.

Managing booting of secure devices with untrusted software

A method for dynamically (i.e., upon boot) rewriting, in a failure resistant manner, of part of, or the entirety of, the flash memory for a device allows for a changing of location for logical blocks of execute-in-place code. Conveniently, the rewriting results in a randomization, of varying degree, of the address space layout upon each boot up cycle.

Method for address space layout randomization in execute-in-place code

A method and apparatus for monitoring communications from a communications device comprising monitoring communications from a communications device by storing a data acquisition address in a contact list of the communications device that identifies a location of a monitoring device. Further, when malicious software uses the contact list to send messages, a message is sent using the malicious software to the monitoring device using the data acquisition address.

Method and apparatus for monitoring communications from a communications device

Growing community of inventors

Belmont, United Kingdom

Oliver Whitehouse