Patent ID: 8572372

Claim:
A method of providing at least one user of a mobile terminal in a communication network with controlled access to files in a file system, comprising the steps of: configuring the files in said file system as a file body containing a file content and a file header containing content profile information identifying said file content, wherein said content profile information is ciphered; providing in said mobile terminal a security identity module and a secure agent; storing in said security identity module user profile information identifying a set of content profiles allowed for access to said file system by said at least one user; extracting, via said secure agent, said content profile information from the headers of the files in said file system; retrieving, via said secure agent, said user profile information stored in said security identity module; checking said user profile information and said content profile information for a possible match; providing said at least one user with access to the files in said file system for which said user profile information and said content profile information are found to match; including in said header a random identifier generated at the time of creation of the respective file in said file system; generating a service key as a secret function of said random identifier and a master key stored in said security identity module; and signing said ciphered content profile information in said file header by means of said service key.