Research in Motion Corporation

Blackberry Corporation

Ian Patterson

Wen Gao

James Godfrey

Allan David Lewis

Tabitha Kari Ferguson

James Andrew Godfrey

Denny K Chiu

David Bajar

Neil Patrick Adams

Michael Kenneth Brown

Herb A Little

Marc Plumb

Tabitha Ferguson

David Paul Yach

Russell Norman Owen

George Dos Santos

Graeme Whittington

Philip C Luk

Pascal Gaudette

Ian M Patterson

Allen David Lewis

David A Bajar

Tabitha K Ferguson

David Anthony Bajar

Dave Bajar

Philip Luk

A system for controlling configuration settings for mobile data communication devices and services includes a redirection server and a policy generation system. The redirection server detects a triggering event in a host system and in response to the triggering event continuously redirects data items from the host system to a wireless network. Each mobile data communication device receives data items from the wireless network and includes a device configuration stored in a memory location on the mobile data communication device. The device configuration of each mobile data communication device controls one or more functions of the mobile data communication device. The policy generation system receives a policy setting from a user interface and stores the policy setting in a user information record associated with a mobile data communication device. The redirection server detects the policy setting in the user information record and in response to detecting the policy setting transmits the policy setting over the wireless network to the mobile data communication device associated with the user information record. The mobile data communication device automatically modifies the device configuration to include the policy setting. Methods of controlling a configuration setting in mobile data communication devices are also disclosed.

System and method for controlling configuration settings for mobile communication devices and services

A method, device and system for controlling a user device by a server. In one example, the user device comprises a plurality of applications, the method comprising: defining a set of application policy settings for the user device; and transmitting to the user device the application policy settings to control the management of at least one of the plurality of applications, wherein at least one of the application policy settings controls how at least one setting of the at least one of the plurality of applications may be user-configurable.

A system for remotely controlling mobile communication devices includes a redirection system, a remote control system and a mobile data communication device. The redirection system detects a triggering event at a host system and in response to the triggering event continuously redirects data items from the host system to a wireless network. The mobile data communication device receives data items from the wireless network and executes a plurality of device operations. The remote control system receives control information from a user interface and transmits the control information through the redirection system to the wireless network. The control information is received and executed by the mobile data communication device to remotely control one or more of the device operations. Methods of controlling the operation of mobile data communication devices are also disclosed.

System and method for remotely controlling mobile communication devices

A method for implementing policy settings in a user device comprising a plurality of applications, wherein the policy settings comprise at least one application policy setting for managing at least one of the plurality of applications and at least one client policy setting for managing the user device, the method comprising determining a set of policy settings for the user device, providing an update of the policy settings and causing implementation of the policy settings by the user device, to control management of the at least one of the plurality of applications and management of the user device.

In one embodiment, a method operable on a mobile communications device is disclosed, the method comprising generating an authentication key for securing a personalized indicium assigned to the mobile communications device, wherein the personalized indicium comprises a Personal Information Number (PIN) that is mapped to at least one identifier associated with the mobile communications device; transmitting a registration request to a network node operable with a wireless network, the registration request having a registration request payload including the authentication key; receiving a challenge message from the network node, the challenge message generated when the network node detects a change of the IP address associated with the mobile communications device, and responsive to receiving the challenge message, executing a challenge response including an authentication value of a challenge string transmitted in the challenge message, wherein the authentication value is created using the authentication key.

System and method for securing a personalized indicium assigned to a mobile communications device

A wireless mobile communication device includes a processing system, a memory device and software. The software is stored on the memory device and executable by the processing system to receive a policy setting, authenticate a sender of the received policy, and automatically apply the policy setting on the communication device based on a successful authentication of the sender.

A bypass server is placed in an outgoing link between a mobile device server and a relay used to distribute data from the mobile device server to remote mobile devices to which the data is addressed. Where a direct connection is established between a suitably configured network node (such as a personal computer) and a given mobile device, the bypass server may form a local connection with the network node and divert along the local connection those packets that are addressed to the given mobile device. As such, a lower cost/higher bandwidth local communication path between the given mobile device and the mobile device server may be established, when compared to the conventional remote communication path. The local communication path may be especially useful for bulk data transfers.

Bypass routing to a mobile device

In one embodiment, a scheme is provided for securing a personalized indicium assigned to a mobile communications device. Upon detecting at a network node that an address associated with the mobile communications device has changed, a challenge-and-response procedure is negotiated between the mobile communications device and the network node for authenticating the personalized indicium using a shared authentication key.

In one embodiment, a method is provided for managing secure registration of a mobile communications device, the method comprising registering, at a network node, the mobile communications device using a first registration process, the first registration process requiring an authentication key associated with the mobile communications device; processing a request from the mobile communications device, the request including an indication that the mobile communications device is changing to a second registration process; and clearing the authentication key associated with the mobile communications device upon expiration of a time window.

System and method for managing secure registration of a mobile communications device

In one embodiment, a scheme is provided for managing secure registration of a mobile communications device. Upon being provided with an upgraded registration process that requires encryption, the mobile communications device has the option of continuing to register with a network node using a downgraded registration process within a specified time window which involves unencrypted registration requests and responses. Thereafter, the mobile communications device is operable to select between the upgraded and downgraded registration processes.

Growing community of inventors

Waterloo, Canada

Wen Gao