Source: http://www.google.com/patents/US7549043?dq=6188988
Timestamp: 2013-12-09 10:50:33
Document Index: 469294309

Matched Legal Cases: ['Application No. 200504221', 'Application No. 2005204221', 'Application No. 2', 'Application No. 200510095984', 'Application No. 04104195', 'Application No. 08154580', 'Application No. 04104195', 'Application No. 08154580', 'Application No. 04104195', 'Application No. 2290', 'Application No. 2005', 'Application No. 10', 'Application No. 10', 'Application No. 200505340', 'Application No. 200505340']

Patent US7549043 - Providing certificate matching in a system and method for searching and ... - Google PatentsSearch Images Maps Play YouTube News Gmail Drive More »Advanced Patent Search | Sign inAdvanced Patent SearchPatentsA system and method for searching and retrieving certificates, which may be used in the processing of encoded messages. In one broad aspect, a message management server generates certificate identification data from a message that uniquely identifies a certificate associated with the message. The certificate...http://www.google.com/patents/US7549043?utm_source=gb-gplus-sharePatent US7549043 - Providing certificate matching in a system and method for searching and retrieving certificatesPublication numberUS7549043 B2Publication typeGrantApplication numberUS 10/931,109Publication dateJun 16, 2009Filing dateSep 1, 2004Priority dateSep 1, 2004Fee statusPaidAlso published asUS8296829, US20060047962, US20090199007, US20130007447Publication number10931109, 931109, US 7549043 B2, US 7549043B2, US-B2-7549043, US7549043 B2, US7549043B2InventorsNeil P. Adams, Michael S. Brown, Herbert A. LittleOriginal AssigneeResearch In Motion LimitedPatent Citations (22), Non-Patent Citations (28), Referenced by (4), Classifications (13), Legal Events (3) External Links: USPTO, USPTO Assignment, EspacenetProviding certificate matching in a system and method for searching and retrieving certificatesUS 7549043 B2Abstract A system and method for searching and retrieving certificates, which may be used in the processing of encoded messages. In one broad aspect, a message management server generates certificate identification data from a message that uniquely identifies a certificate associated with the message. The certificate identification data can then be used to determine whether a given located certificate retrieved from one or more certificate servers in response to a certificate search request is the certificate associated with the message. Only the certificate identification data is needed to facilitate the determination at a user's computing device (e.g. a mobile device), alleviating the need for the user to download the entire message to the computing device in order to make the determination.
BACKGROUND OF THE INVENTION Electronic mail (�e-mail�) messages may be encoded using one of a number of known protocols. Some of these protocols, such as Secure Multiple Internet Mail Extensions (�S/MIME�) for example, rely on public and private encryption keys to provide confidentiality and integrity, and on a Public Key Infrastructure (PKI) to communicate information that provides authentication and authorization. Data encrypted using a private key of a private key/public key pair can only be decrypted using the corresponding public key of the pair, and vice-versa. The authenticity of public keys used in the encoding of messages is validated using certificates. In particular, if a user of a computing device wishes to encrypt a message before the message is sent to a particular individual, the user will require a certificate for that individual. That certificate will typically comprise the public key of the individual, as well as other identification-related information. Similarly, if a user of a computing device wishes to authenticate the sender of a signed message, the user will require a certificate for that sender.
SUMMARY OF THE INVENTION Embodiments of the invention are generally directed to a system and method for more efficiently searching and retrieving certificates, in which the requisite certificate can be identified without requiring the sender's message to be downloaded in its entirety to the user's computing device (e.g. a mobile device). In particular, the system and method facilitates a determination of the requisite certificate from certificates located in a search of one or more certificate servers.
When a user of mobile device 100 receives a signed message from a sender, the certificate of the sender is required in order to verify the integrity of the message and authenticate the identity of the sender. This certificate may also be referred to herein in the specification and in the claims as a �sender certificate� or �sender's certificate�. Consider the situation where only a part of the received message has been downloaded to mobile device 100, for viewing by a user through a messaging application executing and residing on mobile device 100. The part of the message received likely includes header information (e.g. header 352 of FIG. 6) from which at least the sender's e-mail address can typically be obtained. However, the part of the message received by mobile device 100 might not include the sender's certificate or identifiers that can be used to identify the requisite certificate, since such signature-related information is typically attached near the end of a message (see e.g., signature and signature-related information 360 of FIG. 6).
Patent CitationsCited PatentFiling datePublication dateApplicantTitleUS6301658 *Sep 9, 1998Oct 9, 2001Secure Computing CorporationMethod and system for authenticating digital certificates issued by an authentication hierarchyUS20020053023 *Feb 28, 2001May 2, 2002Patterson Andrew JohnCertification validation systemUS20020147905Apr 5, 2001Oct 10, 2002Sun Microsystems, Inc.System and method for shortening certificate chainsUS20020169954 *Jun 22, 2001Nov 14, 2002Bandini Jean-Christophe DenisMethod and system for e-mail message transmissionUS20030074555Oct 17, 2001Apr 17, 2003Fahn Paul NeilURL-based certificate in a PKIUS20030126085 *Dec 27, 2001Jul 3, 2003Slamdunk Networks, Inc.Dynamic authentication of electronic messages using a reference to a certificateUS20030212888 *Mar 3, 2003Nov 13, 2003Wildish Michael AndrewSystem and method of looking up and validating a digital certificate in one passUS20040133520 *Jun 17, 2003Jul 8, 2004Callas Jonathan D.System and method for secure and transparent electronic communicationUS20040133775 *Jun 17, 2003Jul 8, 2004Callas Jonathan D.System and method for secure electronic communication in a partially keyless environmentUS20050005097 *Sep 29, 2003Jan 6, 2005Minolta Co., Ltd.Communication system and method in public key infrastructureUS20050148323 *Mar 20, 2003Jul 7, 2005Research In Motion LimitedSystem and method for supporting multiple certificate status providers on a mobile communication deviceUS20060036849 *Aug 9, 2004Feb 16, 2006Research In Motion LimitedSystem and method for certificate searching and retrievalCA2476914A1Aug 9, 2004Feb 9, 2006Research In Motion LimitedSystem and method for certificate searching and retrievalJP2001197055A Title not availableJP2001265216A Title not availableJP2002163395A Title not availableJP2003046499A Title not availableJP2003348078A Title not availableJP2004179724A Title not availableWO2003009561A2 *Jul 16, 2002Jan 30, 2003Research In Motion LtdA system and method for supporting multiple certificate authorities on a mobile communication deviceWO2003079627A2Mar 20, 2003Sep 25, 2003Research In Motion LtdSystem and method for supporting multiple certificate status providers on a mobile communication deviceWO2003079628A1Mar 20, 2003Sep 25, 2003Neil P AdamsCertificate information storage system and method* Cited by examinerNon-Patent CitationsReference1"Blackberry Security with the S/MIME Support Package version 1.5", Research In Motion Limited, Dec. 17, 2003, pp. 1-24.2Australian Notice of Acceptance. Application No. 200504221. Dated: Jan. 15, 2008.3Australian Search Report. Application No. 2005204221. Dated: Nov. 6, 2006.4Canadian First Office Action. Application No. 2,517,209. Dated: Jul. 14, 2008.5 *Chadwick, D.W. et al. "Modifiying LDAP to Support X.509-basedPKIs", In Seventeenth Annual IFIP WG 11.3 Working Conference on Database and Applications Security at Estes Park, Colorado, Aug. 2003.6Chinese First Office Action (English translation). Application No. 200510095984.7. Dated Nov. 21, 2008.7Co-pending U.S. Appl. No. 10/931,983, "System and Method for Searching and Retrieving Certificates", filed Sep. 2, 2004. (Retrievable from PAIR).8European Communication under Rule 51(4) EPC. Application No. 04104195.5. Dated: Oct. 31, 2007.9European Communications under Rule 71(3) EPC. Application No. 08154580.8. Dated Oct. 23, 2008.10European Search and Examination Report. Application No. 04104195.5 Date: Feb. 10, 2005.11European Search and Examination Report. Application No. 08154580.8. Dated: May 27, 2008.12European Search Report. Application No. 04104195.5 Dated: Dec. 14, 2006.13 *H�metvaara, Vesa. "Certificate Management in Mobile Devices", May 2002.14 *Housley, R et al. "Internet X.509 Public Key Infrastructure Certificate and CRL Profile (RFC 2459)", Jan. 1999.15Indian Examination Letter. Application No. 2290/DEL/2005. Dated: Apr. 13, 2007.16 *ITU-T. "Information technology-Open systems interconnection-The Directory: Public-key and attribute certificate frameworks", Mar. 2000.17Japanese First Office Action (English Translation). Application No. 2005-250982. Dated: January 14, 2009.18Korean Decision for Final Rejection (English translation). Application No. 10-2005-0081103. Dated: Apr. 12, 2007.19Korean Search Report. Application No. 10-2005-0081103. Dated: Sep. 27, 2006.20Miyagawa, "Internet security course starting from zero" second period, ASCII network PRO, vol. 5, No. 6, Japan ASCII Corporation, Jun. 2000, vol. 5, pp. 96-99.21 *Myers, M. et al. "Certificate Management Messages over CMS (RFC 2797)", Apr. 2000.22Myers, M. et al., X.509 Internet Public Key Infrastructure Online Certificate Status Protocol - OCSP, RFC2560 (Jun. 1999).23 *Ramsdell, B. et al. "Secure/Multipurpose Internet Mail Extensions (S/MIME) Version 3.1 Certificate Handling (RFC 3850)", Jul. 2004.24Research In Motion Limited, "BlackBerry Security with S/MIME support Package version 1.5", Dec. 17, 2003.25Shikii, C++ Builder component programming [26], DDJ vol. 8, No. 3, Japan, Shoei Corporation, Mar. 1999, vol. 8, pp. 137-142.26Singapore Examination Report. Application No. 200505340-0. Dated: Sep. 19, 2006.27Singapore Written Opinion Application No. 200505340-0 Date: Jan. 25, 2005.28United States Office Action. U.S. Appl. No. 10/931,983. filed: Nov. 13, 2007. (Retrieved from PAIR).* Cited by examinerReferenced byCiting PatentFiling datePublication dateApplicantTitleUS8209530Dec 22, 2009Jun 26, 2012Research In Motion LimitedSystem and method for searching and retrieving certificatesUS8296829Mar 17, 2009Oct 23, 2012Research In Motion LimitedProviding certificate matching in a system and method for searching and retrieving certificatesUS8312165Oct 1, 2010Nov 13, 2012Research In Motion LimitedSystem and method for handling electronic mail mismatchesUS8473561Nov 8, 2012Jun 25, 2013Research In Motion LimitedSystem and method for handling electronic mail mismatchesClassifications U.S. Classification713/156, 726/6, 709/206, 713/176, 713/175International ClassificationG06F7/04, H04L9/08, H04L9/32, G06F15/82Cooperative ClassificationH04L63/0823, H04L63/0442European ClassificationH04L63/04B2, H04L63/08CLegal EventsDateCodeEventDescriptionOct 1, 2012FPAYFee paymentYear of fee payment: 4May 17, 2011CCCertificate of correctionNov 12, 2004ASAssignmentOwner name: RESEARCH IN MOTION LIMITED, CANADAFree format text: ASSIGNMENT OF ASSIGNORS INTEREST;ASSIGNORS:ADAMS, NEIL P.;BROWN, MICHAEL S.;LITTLE, HERBERT A.;REEL/FRAME:015985/0623Effective date: 20040928RotateOriginal ImageGoogle Home - Sitemap - USPTO Bulk Downloads - Privacy Policy - Terms of Service - About Google Patents - Send FeedbackData provided by IFI CLAIMS Patent Services©2012 Google