IP Library Granted Patent US 8,341,411
Granted Patent B2
US 8,341,411 · App. 11/464,896 · Granted Dec 25, 2012

Enabling use of a certificate stored in a smart card

View Patent ↗
Loading inventors, assignments & file history…
Monitor This Case
Get email alerts when status or documents change.
Order Certified Copies
Most orders are placed with the USPTO same day — all within 24 business hours.
Order via The Patent Place →
Pre-filled with this patent's details
Quick Facts
Patent No.
US 8,341,411
App. No.
11/464,896
Granted
Dec 25, 2012
Kind
B2
Abstract

If a smart card is to be used for a particular purpose, and there is no certificate initialized on the smart card for this purpose, a computerized device enables a user to select one of the certificates already installed in the smart card for the particular purpose. The selected certificate may be imported into the computerized device.

Claims (79)

1. A method in a computerized device coupled to a smart card reader, the method comprising:

identifying that a smart card that is coupled to said smart card reader stores one or more certificates that are not assigned to a particular purpose for which a certificate requirement exists;

enabling selection for said particular purpose, via a user input interface of said computerized device, of a certificate from said one or more certificates;

importing said selected certificate to said computerized device for said particular purpose;

sending a challenge to said smart card;

receiving a signed version of said challenge from said smart card;

using said imported certificate to verify that said signed version is signed using a private key paired to said imported certificate; and

permitting said particular purpose on said computerized device if said signed version is verified.

2. The method of claim 1 , further comprising:

storing said imported certificate in said computerized device.

3. The method of claim 1 , wherein said particular purpose is unlocking said computerized device.

4. The method of claim 1 , wherein said particular purpose is accessing information via said computerized device.

5. The method of claim 1 , wherein said particular purpose is accessing a network via said computerized device.

6. The method of claim 1 , further comprising:

enabling receipt of a password;

comparing said received password to an authentication password stored in said smart card; and

importing said selected certificate only if said received password and said authentication password stored in said smart card are identical.

7. The method of claim 1 , further comprising:

calculating a hash of said imported certificate; and

storing said hash in said computerized device.

8. The method of claim 7 , in the event that said imported certificate is no longer stored in said computerized device, the method further comprising:

importing another certificate to said computerized device;

calculating a hash of said other imported certificate; and

comparing said hash of said other imported certificate to said stored hash.

9. The method of claim 8 , further comprising:

if said hash of said other imported certificate and said stored hash are identical, using said other imported certificate for said particular purpose in said computerized device.

10. The method of claim 1 , further comprising:

identifying said imported certificate to said smart card in conjunction with sending said challenge to said smart card.

11. A non-transitory computer-readable medium having computer-executable instructions thereon which, when executed by a computerized device that is coupled to a smart card reader, result in:

identifying that a smart card that is coupled to said smart card reader stores one or more certificates that are not assigned to a particular purpose for which a certificate requirement exists;

enabling selection for said particular purpose, via a user input interface of said computerized device, of a certificate from said one or more certificates;

importing said selected certificate to said computerized device for said particular purpose;

sending a challenge to said smart card;

receiving a signed version of said challenge from said smart card;

using said imported certificate to verify that said signed version is signed using a private key paired to said imported certificate; and

permitting said particular purpose on said computerized device if said signed version is verified.

12. The non-transitory computer-readable medium of claim 11 , wherein said instructions, when executed by said computerized device, further result in:

storing said imported certificate in said computerized device.

13. The non-transitory computer-readable medium of claim 11 , wherein said instructions, when executed by said computerized device, further result in:

enabling receipt of a password;

comparing said received password to an authentication password stored in said smart card; and

importing said selected certificate only if said received password and said authentication password stored in said smart card are identical.

14. The non-transitory computer-readable medium of claim 11 , wherein said instructions, when executed by said computerized device, further result in:

calculating a hash of said imported certificate; and

storing said hash in said computerized device.

15. The non-transitory computer-readable medium of claim 11 , wherein said instructions, when executed by said computerized device, further result in:

identifying said imported certificate to said smart card in conjunction with sending said challenge to said smart card.

16. A computerized device comprising:

a communication interface through which said computerized device is able to couple to a smart card reader;

a user input interface;

a processor coupled to said communication interface and to said user input interface; and

a memory coupled to said processor, said memory arranged to store code which, when executed by said processor, is arranged:

to identify that a smart card coupled to said smart card reader stores one or more certificates that are not assigned to a particular purpose for which a certificate requirement exists;

to enable selection for said particular purpose, via said user input interface, of a certificate from said one or more certificates;

to import said selected certificate to said computerized device for said particular purpose;

to send a challenge to said smart card;

to receive a signed version of said challenge from said smart card;

to use said imported certificate to verify that said signed version is signed using a private key paired to said imported certificate; and

to permit said particular purpose on said computerized device if said signed version is verified.

17. The computerized device of claim 16 , wherein said code, when executed by said processor, is further arranged:

to store said imported certificate in said computerized device.

18. The computerized device of claim 16 , wherein said code, when executed by said processor, is further arranged:

to identify said imported certificate to said smart card in conjunction with sending said challenge to said smart card.

19. The computerized device of claim 16 , wherein said particular purpose is unlocking said computerized device.

20. The computerized device of claim 16 , wherein said particular purpose is accessing information via said computerized device.

21. The computerized device of claim 16 , wherein said particular purpose is accessing a network via said computerized device.

22. The computerized device of claim 16 , wherein said code, when executed by said processor, is further arranged:

to enable receipt of a password;

to compare said received password to an authentication password stored in said smart card; and

to import said selected certificate only if said received password and said authentication password stored in said smart card are identical.

23. The computerized device of claim 16 , wherein said code, when executed by said processor, is further arranged:

to calculate a hash of said imported certificate; and

to store said hash in said computerized device.

24. The computerized device of claim 23 , wherein said code, when executed by said processor, is further arranged, in the event that said imported certificate is no longer stored in said computerized device:

to import another certificate to said computerized device;

to calculate a hash of said other imported certificate; and

to compare said hash of said other imported certificate to said stored hash.

25. The computerized device of claim 24 , wherein said code, when executed by said processor, is further arranged:

if said hash of said other imported certificate and said stored hash are identical, to use said other imported certificate for said particular purpose in said computerized device.

Assignments (3)
NUNC PRO TUNC ASSIGNMENT Recorded Jun 19, 2023
From: BLACKBERRY LIMITED
To: MALIKIE INNOVATIONS LIMITED
Reel/Frame 064269/0001 →
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Jun 16, 2023
From: BLACKBERRY LIMITED
To: MALIKIE INNOVATIONS LIMITED
Reel/Frame 064104/0103 →
CHANGE OF NAME Recorded Apr 17, 2014
From: RESEARCH IN MOTION LIMITED
To: BLACKBERRY LIMITED
Reel/Frame 032712/0618 →