IP Library Granted Patent US 8,566,582
Granted Patent B2
US 8,566,582 · App. 13/483,216 · Granted Oct 22, 2013

System and method for searching and retrieving certificates

View Patent ↗
Loading inventors, assignments & file history…
Monitor This Case
Get email alerts when status or documents change.
Order Certified Copies
Most orders are placed with the USPTO same day — all within 24 business hours.
Order via The Patent Place →
Pre-filled with this patent's details
Quick Facts
Patent No.
US 8,566,582
App. No.
13/483,216
Granted
Oct 22, 2013
Kind
B2
Abstract

A system and method for searching and retrieving certificates, which may be used in the processing of encoded messages. In one broad aspect, a method is provided in which a certificate search request is received, a search of one or more certificate servers for certificates satisfying the request is performed, located certificates are retrieved and processed at a first computing device to determine data that uniquely identifies each located certificate, and search result data comprising the determined data is communicated to a second device (e.g. a mobile device) for use in determining whether each located certificate is already stored on the second device.

Claims (59)

1. A method of retrieving certificates, the method comprising:

transmitting a certificate search request from an application executing on a mobile device to one or more certificate servers;

for each of one or more located certificates, receiving, at the mobile device in response to the certificate search request, search result data associated with the located certificate from the one or more certificate servers, wherein the search result data for the located certificate comprises serial number and issuer data that uniquely identifies the located certificate and is not the entire data within the located certificate;

determining, by the application without user intervention, whether each located certificate is already stored on the mobile device by comparing the serial number and issuer data that uniquely identifies the located certificate in said search result data to serial number and issuer data associated with certificates stored on the mobile device so that the located certificate is not required to be downloaded in its entirety to the mobile device to determine whether the located certificate is stored on the mobile device;

in response to the determining, selecting certificates for retrieval after identifying which located certificates are already stored on the mobile device; and

retrieving, to the mobile device, the located certificates that are selected for retrieval by the application from the one or more certificate servers, for storage on the mobile device.

2. The method of claim 1 , further comprising identifying, in a user interface of the mobile device, which located certificates are not already stored on the mobile device; wherein the selecting is performed, in response to the identifying which located certificates are not already stored on the mobile device, based on user input received at the mobile device.

3. The method of claim 1 , wherein the selecting and the retrieving is performed without user intervention.

4. The method of claim 1 , wherein the one or more certificate servers comprises an LDAP server.

5. A mobile device configured to retrieve certificates from one or more certificate servers, the mobile device comprising:

a physical processor configured to

transmit a certificate search request from an application executing on the mobile device to the one or more certificate servers;

for each of one or more located certificates, receive, at the mobile device in response to the certificate search request, search result data associated with the located certificate from the one or more certificate servers, wherein the search result data for the located certificate comprises serial number and issuer data that uniquely identifies the located certificate and is not the entire data within the located certificate;

determine, by the application without user intervention, whether each located certificate is already stored on the mobile device by comparing the serial number and issuer data that uniquely identifies the located certificate in said search result data to serial number and issuer data associated with certificates stored on the mobile device so that the located certificate is not required to be downloaded in its entirety to the mobile device to determine whether the located certificate is stored on the mobile device;

in response to determining whether each located certificate is already stored on the mobile device, select certificates for retrieval after identifying which located certificates are already stored on the mobile device; and

retrieve, to the mobile device, the located certificates that are selected for retrieval by the application from the one or more certificate servers, for storage on the mobile device.

6. The device of claim 5 , wherein the processor is configured to identify, in a user interface of the mobile device, which located certificates are not already stored on the mobile device; and wherein the processor is configured to select the certificates for retrieval, in response to identifying which located certificates are not already stored on the mobile device, based on user input received at the mobile device.

7. The device of claim 5 , wherein the processor is configured to select the certificate for retrieval and to retrieve the located certificates that are selected for retrieval without user intervention.

8. The device of claim 5 , wherein the one or more certificate servers comprises an LDAP server.

9. A non-transitory computer-readable medium comprising instructions for execution by a processor of a mobile device, the instructions causing the processor to perform a method of retrieving certificates comprising:

transmitting a certificate search request from an application executing on the mobile device to one or more certificate servers;

for each of one or more located certificates, receiving, at the mobile device in response to the certificate search request, search result data associated with the located certificate from the one or more certificate servers, wherein the search result data for the located certificate comprises serial number and issuer data that uniquely identifies the located certificate and is not the entire data within the located certificate;

determining, by the application without user intervention, whether each located certificate is already stored on the mobile device by comparing the serial number and issuer data that uniquely identifies the located certificate in said search result data to serial number and issuer data associated with certificates stored on the mobile device so that the located certificate is not required to be downloaded in its entirety to the mobile device to determine whether the located certificate is stored on the mobile device;

in response to the determining, selecting certificates for retrieval after identifying which located certificates are already stored on the mobile device; and

retrieving, to the mobile device, the located certificates that are selected for retrieval by the application from the one or more certificate servers, for storage on the mobile device.

10. The medium of claim 9 , wherein the instructions further cause the processor to identify, in a user interface of the mobile device, which located certificates are not already stored on the mobile device; wherein the selecting is performed, in response to identifying which located certificates are not already stored on the mobile device, based on user input received at the mobile device.

11. The medium of claim 9 , wherein the selecting and the retrieving is performed without user intervention.

12. The medium of claim 9 , wherein the one or more certificate servers comprises an LDAP server.

13. A method of retrieving certificates, the method comprising:

transmitting a certificate search request from an application executing on a mobile device to one or more certificate servers;

for each of one or more located certificates, receiving, at the mobile device in response to the certificate search request, search result data associated with the located certificate from the one or more certificate servers, wherein the search result data for the located certificate comprises a certificate hash that uniquely identifies the located certificate and is not the entire data within the located certificate;

determining, by the application without user intervention, whether each located certificate is already stored on the mobile device by comparing the certificate hash that uniquely identifies the located certificate in said search result data to certificate hashes associated with certificates stored on the mobile device so that the located certificate is not required to be downloaded in its entirety to the mobile device to determine whether the located certificate is stored on the mobile device;

in response to the determining, selecting certificates for retrieval after identifying which located certificates are already stored on the mobile device; and

retrieving, to the mobile device, the located certificates that are selected for retrieval by the application from the one or more certificate servers, for storage on the mobile device.

14. The method of claim 13 , further comprising identifying, in a user interface of the mobile device, which located certificates are not already stored on the mobile device; wherein the selecting is performed, in response to the identifying which located certificates are not already stored on the mobile device, based on user input received at the mobile device.

15. The method of claim 13 , wherein the selecting and the retrieving is performed without user intervention.

16. The method of claim 13 , wherein the one or more certificate servers comprises an LDAP server.

17. The method of claim 13 , further comprising generating one or more certificate hashes associated with certificates stored on the mobile device.

18. A mobile device configured to retrieve certificates from one or more certificate servers, the mobile device comprising:

a physical processor configured to

transmit a certificate search request from an application executing on the mobile device to the one or more certificate servers;

for each of one or more located certificates, receive, at the mobile device in response to the certificate search request, search result data associated with the located certificate from the one or more certificate servers, wherein the search result data for the located certificate comprises a certificate hash that uniquely identifies the located certificate and is not the entire data within the located certificate;

determine, by the application without user intervention, whether each located certificate is already stored on the mobile device by comparing the certificate hash that uniquely identifies the located certificate in said search result data to certificate hashes associated with certificates stored on the mobile device so that the located certificate is not required to be downloaded in its entirety to the mobile device to determine whether the located certificate is stored on the mobile device;

in response to determining whether each located certificate is already stored on the mobile device, select certificates for retrieval after identifying which located certificates are already stored on the mobile device; and

retrieve, to the mobile device, the located certificates that are selected for retrieval by the application from the one or more certificate servers, for storage on the mobile device.

19. The device of claim 18 , wherein the processor is configured to identify, in a user interface of the mobile device, which located certificates are not already stored on the mobile device; and wherein the processor is configured to select the certificates for retrieval, in response to identifying which located certificates are not already stored on the mobile device, based on user input received at the mobile device.

20. The device of claim 18 , wherein the processor is configured to select the certificates for retrieval and to retrieve the located certificates that are selected for retrieval without user intervention.

21. The device of claim 18 , wherein the one or more certificate servers comprises an LDAP server.

22. The device of claim 18 , wherein the processor is configured to generate one or more certificate hashes associated with certificates stored on the mobile device.

23. A non-transitory computer-readable medium comprising instructions for execution by a processor of a mobile device, the instructions causing the processor to perform a method of retrieving certificates comprising:

transmitting a certificate search request from an application executing on the mobile device to one or more certificate servers;

for each of one or more located certificates, receiving, at the mobile device in response to the certificate search request, search result data associated with the located certificate from the one or more certificate servers, wherein the search result data for the located certificate comprises a certificate hash that uniquely identifies the located certificate and is not the entire data within the located certificate;

determining, by the application without user intervention, whether each located certificate is already stored on the mobile device by comparing the certificate hash that uniquely identifies the located certificate in said search result data to certificate hashes associated with certificates stored on the mobile device so that the located certificate is not required to be downloaded in its entirety to the mobile device to determine whether the located certificate is stored on the mobile device;

in response to the determining, selecting certificates for retrieval after identifying which located certificates are already stored on the mobile device; and

retrieving, to the mobile device, the located certificates that are selected for retrieval by the application from the one or more certificate servers, for storage on the mobile device.

24. The medium of claim 23 , wherein the instructions further cause the processor to identify, in a user interface of the mobile device, which located certificates are not already stored on the mobile device; wherein the selecting is performed, in response to identifying which located certificates are not already stored on the mobile device, based on user input received at the mobile device.

25. The medium of claim 23 , wherein the selecting and the retrieving is performed without user intervention.

26. The medium of claim 23 , wherein the one or more certificate servers comprises an LDAP server.

27. The medium of claim 23 , wherein the instructions further cause the processor to generate one or more certificate hashes associated with certificates stored on the mobile device.

Assignments (4)
NUNC PRO TUNC ASSIGNMENT Recorded Jun 19, 2023
From: BLACKBERRY LIMITED
To: MALIKIE INNOVATIONS LIMITED
Reel/Frame 064269/0001 →
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Jun 16, 2023
From: BLACKBERRY LIMITED
To: MALIKIE INNOVATIONS LIMITED
Reel/Frame 064104/0103 →
CHANGE OF NAME Recorded Jul 29, 2013
From: RESEARCH IN MOTION LIMITED
To: BLACKBERRY LIMITED
Reel/Frame 030919/0108 →
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded May 30, 2012
From: ADAMS, NEIL P.; BROWN, MICHAEL S.; LITTLE, HERBERT A.
To: RESEARCH IN MOTION LIMITED
Reel/Frame 028285/0827 →