Blackberry Corporation

Research in Motion Corporation

Digital 14 LLC

2236008 Ontario Limited

Certicom Corporation

Dark Matter Gmbh

Malikie Innovations Limited

Ravi Singh

Neil Patrick Adams

Alexander Sherkin

Dinah Lea Marie Davis

Richard Paul Sibley

Nikhil Vats

Vincenzo Kazimierz Marcovecchio

Michael Matovsky

Kristof Takacs

Daniel Jonas Major

Sivakumar Nagarajan

Geoffrey Wendell MacGillivray

Herbert Anthony Little

Van Quy Tu

Kevin Goodman

Eugene Chin

Dinah Davis

Marie Anita Brigitte Gagne

Marie Anita Gagne

Kevin Dennis Goodman

Dinah Lea Davis

Michael Kenneth Brown

Peter Mankowski

Michael Edwin McCallum

Shivangi Anantrupa Gandhi

Robert John Lambert

Daniel Richard L Brown

Christopher Lyle Bender

Roger Paul Bowman

Thomas Rudolf Stiemerling

Catalin Visinescu

Dinah L M Davis

Ming Chee Tsang

Marek Paruzel

Marek Krzeminski

Jameson Bauer Hyde

Salvatore Federico Barbieri

Richard Sibley

Marie Anita Brigette Gagne

Vincenzo Kazimierz Marovecchio

Geofrey Wendell Macgillivray

A mobile wireless communications device may include a housing, a wireless transceiver carried by the housing, a memory carried by the housing, a display carried by the housing, and a processor carried by the housing. The processor is configured to implement a digital wallet including a multi-mode user card having first and second user interface modes, and selectively change the multi-mode user card from the first user interface mode to the second user interface mode based upon a current location, a current time, or a determined event. The second user interface mode includes one or more of a mapping interface mode, a survey interface mode, or a purchase interface mode.

Mobile wireless communications device having digital wallet with multi-mode user card and related methods

A system, method, and computer program product are provided for implementing hardware backed symmetric operations for password based authentication. In operation, a system receives a request to access software utilizing password-based authentication. Further, the system receives a password for the password-based authentication. The system computes a hash utilizing the password and a hardware-based authenticator associated with hardware of the system utilizing hardware backed symmetric encryption. Moreover, the system verifies that the hash computed utilizing the password and the hardware-based authenticator is correct for accessing the software.

System, method, and computer program product for performing hardware backed symmetric operations for password based authentication

A mobile wireless communications device communicates with a terminal including a first NFC device, the terminal being capable of receiving data from a provisioning server. The mobile wireless communications device includes a housing, a wireless transceiver carried by the housing, a second NFC device carried by the housing, a memory carried by the housing, a display carried by the housing, and a processor carried by the housing and coupled to the wireless transceiver, the second NFC device, the memory, and the display. The processor is configured to implement a digital wallet including user cards, receive from the terminal, via the second NFC device, a blank user card including user data fields, and fill the user data fields of the blank user card to define a completed user card and send the completed user card to the provisioning server.

Communication system with digital wallet having blank user card and related methods

A system, method, and computer program product are provided for performing hardware-backed password-based authentication. In operation, a system receives a request to access software utilizing password-based authentication. Further, the system receives a password for the password-based authentication. The system computes a hash utilizing the password and a hardware-based authenticator associated with hardware of the system. Moreover, the system verifies that the hash computed utilizing the password and the hardware-based authenticator is correct for accessing the software.

System, method, and computer program product for performing hardware-backed password-based authentication

A system, method, and computer program product are provided for sensitive data recovery in high security systems. In operation, a client device receives a request by a user to initiate a data recovery process to recover data that is encrypted. The client device generates a new data recovery request key pair. The client device creates a data recovery request that includes a data recovery request public key. The client device signs the data recovery request using an identity private key that is associated with a certificate issued by a certification authority (CA). The client device sends the data recovery request to a server system storing the data. The server system accesses an offline data recovery subsystem (ODRS) storing a data recovery key pair to authenticate the user. The ODRS generates and stores a secret data recovery code. The client device receives the secret data recovery code that was communicated to the user. The client device sends the secret data recovery code along with the data recovery request to the server system. The server system verifies the received secret data recovery code against the stored secret data recovery code. The server system verifies a public key associated with the received data recovery request against a public key associated with a stored recovery request. The server system identifies the data recovery request as authenticated. The ODRS verifies a request signature associated with the data recovery request. The ODRS verifies the encrypted signature against encrypted and signed recovery data. The ODRS verifies that a user ID in a password reset request matches a user ID in a message encryption key signature. The ODRS decrypts the data recovery key pair and re-encrypts the data recovery key pair to the data recovery request public key. The ODRS stores the re-encrypted data recovery key pair associated with the data recovery request. The client device queries the server system to obtain the data. The server system returns the data to the client device. The client device decrypts the data using a data recovery private key.

System, method, and computer program product for sensitive data recovery in high security systems

A mobile wireless communications device includes a housing, a wireless transceiver carried by the housing, a memory carried by the housing, a display carried by the housing, and a processor carried by the housing. The processor is configured to implement a digital wallet including a multi-mode user card having first and second user interface modes, and selectively change the multi-mode user card from the first user interface mode to the second user interface mode based upon a current location, a current time, or a determined event. The second user interface mode includes one or more of a mapping interface mode, a survey interface mode, or a purchase interface mode.

A system, method, and computer program product are provided for end-to-end security of centrally accessible group membership information. In use, membership information defining a user group in a messaging system is accessed from a central server, where the membership information includes (1) at least one change to members of the user group, and (2) for each change of the at least one change, a digital signature of a user that made the change. Additionally, a verification process on the membership information is performed, including: for each change of the at least one change, verifying the digital signature of the user that made the change. Further, members of the user group are determined, as a result of the verification process, and at least one action is performed in association with the members of the user group.

System, method, and computer program product providing end-to-end security of centrally accessible group membership information

An apparatus, computer program, and method are afforded for providing a peer-to-peer security protocol. In operation, a message is identified that is directed from a first peer device to a second peer device. Further, the message is copied, so that a copy of the message is caused to be sent to an auditing server.

Peer-to-peer security protocol apparatus, computer program, and method

A system, method, and computer program product are provided for multi-layer encryption of an efficient broadcast message. In use, a message is identified that includes data to be broadcasted to a plurality of recipients as well as identifiers of the plurality of recipients. The message is encrypted using a first encryption process to form a first header portion and a first data portion. Additionally, the message with the first data portion is encrypted using a second encryption process to form a second header portion and a second data portion. Further, the first header portion is encrypted using a third encryption process to form a third header portion. A multi-layer efficient broadcast message is then formed for broadcasting the data to the plurality of recipients, the multi-layer efficient broadcast message including the second header portion, the third header portion, and the second data portion.

System, method, and computer program product for multi-layer encryption of an efficient broadcast message

A method at a computing device having a plurality of concurrently operative operating systems, the method comprising: operating a proxy process within a target operating system on the computing device; receiving, from an originating operating system, a request for resources from a target process within the target operating system at the proxy process; requesting, from the proxy process, the resources of the target process; and returning a handle to the target process from the proxy process to the originating operating system.

System and method for coordinating process and memory management across domains

A communication system is provided for enabling secure communications between at least a sender communication device and at least a recipient communication device or point-of-presence, wherein the then current recipient communication device(s) or point(s)-of-presence for the recipient(s) can vary over time. The communication system includes a network server component configured to maintain a current set of identification information elements for communicating with communication device(s) or points-of-presence associated with the one or more recipients; and if applicable provide up to date one or more identifiers or identification information elements for the one or more recipients to a sender communication device thereby prompting the sender communication device to send the secure communication based on the updated one or more identifiers or identification information elements. A related method is provided for exchanging secure communications between senders and recipients, where the communication device(s) or point(s)-of-presence associated with the recipients can vary over time.

Routing secure communications across multiple communication devices or points-of-presence

A mobile communications device includes a near field communication (NFC) device, a movement determining device, and a processor coupled with the NFC device and the movement determining device. The processor performs operations for selectively switching between a first operating mode, in which the NFC device is enabled for NFC communication, and a second operating mode. When switched to the unsecure operating mode, the processor performs operations for enabling the NFC device for NFC communication until the mobile communications device moves beyond a threshold distance based upon the movement determining device.

Mobile communications device providing near field communication (NFC) security features and related methods

A system and method to monitor executing processes are disclosed. A respective starting fingerprint of memory of each executing process within at least one process is determined during a system startup phase that is prior to a device operational phase. A present fingerprint of memory of the selected executing process within the at least one process is determined during the device operational phase and while a selected executing process is executing. A difference between the respective starting fingerprint of the selected executing process and the present fingerprint of the selected executing process is determined and an indication of the difference for the selected executing process is reported based on determining the difference.

Executing process code integrity verificaton

Systems, methods, and software can be used to provide security assurance information. In some aspects, a certificate request for a client process on a mobile device is received. A security assurance character for the client process is determined. Whether to grant the certificate request is determined based on the determined security assurance character. In response to determining to grant the certificate request, a certificate is generated.

Providing security assurance information

Growing community of inventors

Toronto, Canada

Ravi Singh