Granted Patent B2

US 9,426,145 · App. 13/729,267 · Granted Aug 23, 2016

Abstract

Claims (65)

1. A method of creating a certificate store in a memory of a device, the method comprising:

receiving, at a space management module, a command to create a memory space, the memory space associated with a designation of a class identifying a first mode of operation of the device, such that data in the memory space can not be accessed by applications executed on the device when the device is operating in a second mode of operation;

designating, at the space management module, a range of addresses in a memory for the memory space; and

initializing, at a certificate manager, a certificate store in the memory of the device, the certificate store associated with the designation of the class.

2. The method of claim 1 further comprising transmitting, at the space management module, an inter-process message to the certificate manager to indicate that the certificate store is to be initialized for the memory space.

3. The method of claim 1 wherein the certificate store comprises memory designated for maintaining certificates related to execution of an application configured for world wide web browsing.

4. The method of claim 1 wherein the certificate store comprises memory designated for maintaining certificates related to execution of an application configured for wireless communication.

5. The method of claim 1 wherein the certificate store comprises memory designated for maintaining certificates related to execution of an application configured for facilitating communication on a virtual private network.

6. A mobile communication device comprising:

a memory;

a processor adapted to:

receive a command to create a memory space, the memory space associated with a designation of a class identifying a first mode of operation of the mobile communication device, such that data in the memory space can not be accessed by applications executed on the device when the device is operating in a second mode of operation;

designate a range of addresses in the memory for the memory space; and

initialize a certificate store in the memory, the certificate store associated with the designation of the class.

7. A non-transitory computer-readable medium containing computer-executable instructions that, when performed by a processor in a mobile communication device, cause said processor to:

receive a command to create a memory space, the memory space associated with a designation of a class identifying a first mode of operation of the mobile communication device, such that data in the memory space can not be accessed by applications executed on the device when the device is operating in a second mode of operation;

designate a range of addresses in a memory for the memory space; and

initialize a certificate store in the memory, the certificate store associated with the designation of the class.

8. A method of managing space in a memory of a device, the method comprising:

receiving, at a space management module, a command to delete a given memory space among a plurality of memory spaces, the given memory space associated with a designation of a class identifying a first mode of operation of the device, such that data in the memory space can not be accessed by applications executed on the device when the device is operating in a second mode of operation; and

deleting, at the space management module, application code associated with the designation of the class.

9. The method of claim 8 further comprising deleting, at a certificate manager, a certificate store, the certificate store associated with the designation of the class.

10. The method of claim 9 further comprising transmitting, at the space management module, an inter-process message to the certificate manager to indicate that the certificate store is to be deleted.

11. The method of claim 9 wherein the certificate store comprises memory designated for maintaining certificates related to execution of an application configured for world wide web browsing.

12. The method of claim 9 wherein the certificate store comprises memory designated for maintaining certificates related to execution of an application configured for wireless communication.

13. The method of claim 9 wherein the certificate store comprises memory designated for maintaining certificates related to execution of an application configured for facilitating communication on a virtual private network.

14. A mobile communication device comprising:

a memory;

a processor adapted to:

receive a command to delete a given memory space among a plurality of memory spaces, the given memory space associated with a designation of a class identifying a first mode of operation of the device, such that data in the memory space can not be accessed by applications executed on the device when the device is operating in a second mode of operation; and

delete application code associated with the designation of the class.

15. A non-transitory computer-readable medium containing computer-executable instructions that, when performed by a processor in a mobile communication device, cause said processor to:

receive a command to delete a given memory space among a plurality of memory spaces, the given memory space associated with a designation of a class identifying a first mode of operation of the device, such that data in the memory space can not be accessed by applications executed on the device when the device is operating in a second mode of operation; and

delete application code associated with the designation of the class.

16. A method of handling certificate validation, the method comprising:

receiving a certificate validation command, the certificate validation command specifying a certificate and a certificate store with a designation of a class identifying a first mode of operation of the device, such that data in the memory space can not be accessed by applications executed on the device when the device is operating in a second mode of operation;

building a certificate chain for the certificate;

attempting to validate the certificate chain to a root certification authority certificate in the certificate store; and

replying to a source of the certificate validation command with an indication of validation status.

17. The method of claim 16 wherein the first mode comprises a personal mode of operation of the device.

18. The method of claim 16 wherein the first mode comprises a corporate mode of operation of the device.

19. The method of claim 16 wherein the certificate validation command specifies a plurality of certificate stores associated with the class and the attempting to validate the certificate chain performed for each of the certificate stores in the plurality of certificate stores.

20. A mobile communication device comprising:

a memory; and

a processor adapted to:

receive a certificate validation request, the certificate validation request specifying a certificate store with a designation of a class identifying a first mode of operation of the device, such that data in a memory space can not be accessed by applications executed on the device when the device is operating in a second mode of operation;

build a certificate chain for the certificate;

attempt to validate the certificate chain to a root certification authority certificate in the certificate store; and

reply to a source of the certificate validation command with an indication of validation status.

21. A non-transitory computer-readable medium containing computer-executable instructions that, when performed by a processor in a mobile communication device, cause said processor to:

receive a certificate validation request, the certificate validation request specifying a certificate store with a designation of a class identifying a first mode of operation of the device, such that data in a memory space can not be accessed by applications executed on the device when the device is operating in a second mode of operation;

build a certificate chain for the certificate;

attempt to validate the certificate chain to a root certification authority certificate in the certificate store; and reply to a source of the certificate validation command with an indication of validation status.

22. A method of creating a certificate store in a memory of a device, the method comprising:

receiving a command to create a certificate store, the command indicating a designation of a class identifying a first mode of operation of the device, such that data in a memory space can not be accessed by applications executed on the device when the device is operating in a second mode of operation; and

initializing a certificate store in the memory of the device, the certificate store associated with the designation of the class.

23. The method of claim 22 wherein the certificate store comprises memory designated for maintaining certificates related to execution of an application configured for world wide web browsing.

24. The method of claim 22 wherein the certificate store comprises memory designated for maintaining certificates related to execution of an application configured for wireless communication.

25. The method of claim 22 wherein the certificate store comprises memory designated for maintaining certificates related to execution of an application configured for facilitating communication on a virtual private network.

26. A mobile communication device comprising: a memory; a processor adapted to:

receive a command to create a certificate store, the command indicating a designation of a class identifying a first mode of operation of the mobile communication device, such that data in a memory space can not be accessed by applications executed on the device when the device is operating in a second mode of operation; and

initialize a certificate store in the memory of the device, the certificate store associated with the designation of the class.

27. A non-transitory computer-readable medium containing computer-executable instructions that, when performed by a processor in a mobile communication device, cause said processor to:

receive a command to create a certificate store, the command indicating a designation of a class identifying a first mode of operation of the mobile communication device, such that data in a memory space can not be accessed by applications executed on the device when the device is operating in a second mode of operation; and

initialize a certificate store in the memory of the device, the certificate store associated with the designation of the class.

Assignments (8)