BRPI0415789A - método para gerenciar a segurança de aplicativos com um módulo de segurança - Google Patents

método para gerenciar a segurança de aplicativos com um módulo de segurança

Info

Publication number
BRPI0415789A
BRPI0415789A BRPI0415789-3A BRPI0415789A BRPI0415789A BR PI0415789 A BRPI0415789 A BR PI0415789A BR PI0415789 A BRPI0415789 A BR PI0415789A BR PI0415789 A BRPI0415789 A BR PI0415789A
Authority
BR
Brazil
Prior art keywords
equipment
security module
security
data
sim
Prior art date
Application number
BRPI0415789-3A
Other languages
English (en)
Inventor
Rached Ksontini
Renato Cantini
Original Assignee
Nagracard Sa
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by Nagracard Sa filed Critical Nagracard Sa
Publication of BRPI0415789A publication Critical patent/BRPI0415789A/pt

Links

Classifications

    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04W—WIRELESS COMMUNICATION NETWORKS
    • H04W12/00—Security arrangements; Authentication; Protecting privacy or anonymity
    • H04W12/40—Security arrangements using identity modules
    • H04W12/48—Security arrangements using identity modules using secure binding, e.g. securely binding identity modules to devices, services or applications
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04W—WIRELESS COMMUNICATION NETWORKS
    • H04W12/00—Security arrangements; Authentication; Protecting privacy or anonymity
    • H04W12/12—Detection or prevention of fraud
    • H04W12/126—Anti-theft arrangements, e.g. protection against subscriber identity module [SIM] cloning
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04W—WIRELESS COMMUNICATION NETWORKS
    • H04W8/00—Network data management
    • H04W8/18—Processing of user or subscriber data, e.g. subscribed services, user preferences or user profiles; Transfer of user or subscriber data
    • H04W8/183—Processing at user equipment or user record carrier

Landscapes

  • Engineering & Computer Science (AREA)
  • Computer Security & Cryptography (AREA)
  • Computer Networks & Wireless Communication (AREA)
  • Signal Processing (AREA)
  • Mobile Radio Communication Systems (AREA)
  • Storage Device Security (AREA)
  • Telephonic Communication Services (AREA)
  • Computer And Data Communications (AREA)

Abstract

MéTODO PARA GERENCIAR A SEGURANçA DE APLICATIVOS COM UM MóDULO DE SEGURANçA. O objetivo desta invenção é propor um método para gerenciar a segurança de um conjunto composto de um equipamento, um módulo de segurança e aplicativos a fim de limitar o risco relacionado ao fato de um módulo de segurança poder ser utilizado fraudulentamente por aplicativos executados em um tipo de equipamento e/ou versão do software que não preenche completamente o critério de segurança estabelecido. Este objetivo é alcançado por um método para gerenciar os aplicativos de segurança (APP) com um módulo de segurança funcionando em um equipamento (08) conectado à rede (NET) e gerenciado por um servidor controlador (CSE) de um operador. Tais aplicativos utilizam os recursos (RES) (dados ou funções) armazenados em um módulo de segurança (SIM) conectado localmente a tal equipamento (08), compreendendo as seguintes etapas preliminares: - recepção dos dados compreendendo pelo menos o tipo e a versão do software do equipamento (CB) e a identidade do módulo de segurança (SIM), através da rede, pelo servidor controlador; análise e verificação de tais dados pelo servidor controlador; geração de um criptograma (J) pelo resultado da verificação de tais dados (l0), e sua transmissão através da rede (NET) e do equipamento (CB), ao módulo de segurança (SIM). Tal método é caracterizado por um módulo de segurança (SIM) analisar o criptograma (J) recebido e ativar, e respectivamente desativar os recursos (RES) (dados e funções) utilizadas por pelo menos um aplicativo (APP) instalado no equipamento (CB); tal criptograma (J) compreende as instruções das condições de funcionamento do aplicativo (APP) conforme o critério estabelecido pelo fornecedor de tal aplicativo e/ou o operador e/ou o usuário do equipamento.
BRPI0415789-3A 2003-11-04 2004-11-03 método para gerenciar a segurança de aplicativos com um módulo de segurança BRPI0415789A (pt)

Applications Claiming Priority (2)

Application Number Priority Date Filing Date Title
EP03104069A EP1530392A1 (fr) 2003-11-04 2003-11-04 Méthode de gestion de la sécurité d'applications avec un module de sécurité
PCT/EP2004/052773 WO2005046278A2 (fr) 2003-11-04 2004-11-03 Méthode de gestion de la sécurité d'applications avec un module de sécurité

Publications (1)

Publication Number Publication Date
BRPI0415789A true BRPI0415789A (pt) 2008-03-04

Family

ID=34429492

Family Applications (1)

Application Number Title Priority Date Filing Date
BRPI0415789-3A BRPI0415789A (pt) 2003-11-04 2004-11-03 método para gerenciar a segurança de aplicativos com um módulo de segurança

Country Status (14)

Country Link
US (1) US8001615B2 (pt)
EP (2) EP1530392A1 (pt)
JP (1) JP2007511122A (pt)
KR (1) KR20060117319A (pt)
CN (1) CN1875653A (pt)
AU (1) AU2004307800B2 (pt)
BR (1) BRPI0415789A (pt)
CA (1) CA2544759A1 (pt)
ES (1) ES2429136T3 (pt)
IL (1) IL175254A0 (pt)
RU (1) RU2006114719A (pt)
TW (1) TW200526056A (pt)
WO (1) WO2005046278A2 (pt)
ZA (1) ZA200604291B (pt)

Families Citing this family (39)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
EP1536606A1 (fr) 2003-11-27 2005-06-01 Nagracard S.A. Méthode d'authentification d'applications
US7769175B2 (en) * 2004-11-24 2010-08-03 Research In Motion Limited System and method for initiation of a security update
US7961883B2 (en) 2004-11-24 2011-06-14 Research In Motion Limited System and method for securing a personalized indicium assigned to a mobile communications device
JP5057475B2 (ja) * 2005-06-23 2012-10-24 フランス・テレコム サービスアクセス認証データ管理システム
US7849154B2 (en) * 2005-06-27 2010-12-07 M:Metrics, Inc. Acquiring, storing, and correlating profile data of cellular mobile communications system's users to events
FR2895608B1 (fr) * 2005-12-23 2008-03-21 Trusted Logic Sa Procede pour la realisation d'un compteur securise sur un systeme informatique embarque disposant d'une carte a puce
JP2007274101A (ja) * 2006-03-30 2007-10-18 Nec Corp 携帯電話端末及び改竄防止システム並びに改竄防止方法
DE102006016994A1 (de) * 2006-04-11 2007-10-18 Giesecke & Devrient Gmbh Erfassen des Betriebsmittelverbrauchs
US20080046888A1 (en) * 2006-08-15 2008-02-21 Appaji Anuradha K Framework for Rule-Based Execution and Scheduling of Tasks in Mobile Devices
CN101616415B (zh) * 2006-09-13 2011-09-14 北京握奇数据系统有限公司 移动通信用户身份识别卡信息直接交互方法及其支持设备
JP2008233965A (ja) * 2007-03-16 2008-10-02 Nec Corp 携帯端末装置とそのプログラム、及び、改竄防止システムと改竄防止方法
EP2232815B1 (fr) * 2007-12-07 2020-02-26 Orange Procédé de contrôle d'applications installées sur un module de sécurité associé à un terminal mobile, module de sécurité, terminal mobile et serveur associés
EP2071898A1 (en) * 2007-12-10 2009-06-17 Telefonaktiebolaget LM Ericsson (publ) Method for alteration of integrity protected data in a device, computer program product and device implementing the method
EP2263359B1 (fr) * 2008-03-31 2014-09-03 Orange Procédé d'accès et de transfert de données liées à une application installée sur un module de sécurité associé à un terminal mobile, module de sécurité, serveur de gestion et système associés
US8311518B2 (en) * 2008-04-29 2012-11-13 Esmertec France Method and system for executing applications in wireless telecommunication networks
US8880067B2 (en) * 2008-08-08 2014-11-04 Qualcomm Incorporated Correlating registrations originating from a device
US9256728B2 (en) * 2008-11-26 2016-02-09 Nokia Technologies Oy Method, apparatus, and computer program product for managing software versions
US9264237B2 (en) * 2011-06-15 2016-02-16 Microsoft Technology Licensing, Llc Verifying requests for access to a service provider using an authentication component
CN102299998A (zh) * 2011-09-01 2011-12-28 东信和平智能卡股份有限公司 一种手机应用程序与智能卡通信的方法及系统
CN103037071A (zh) * 2011-09-30 2013-04-10 王海泉 一种手机上通过软件与用户身份识别卡交换数据的方法
GB201207816D0 (en) * 2012-05-04 2012-06-13 Vodafone Ip Licensing Ltd Telecommunication networks
US20130333039A1 (en) * 2012-06-07 2013-12-12 Mcafee, Inc. Evaluating Whether to Block or Allow Installation of a Software Application
JP6072907B2 (ja) 2012-09-18 2017-02-01 グーグル インコーポレイテッド 複数のサービスプロバイダのトラステッドサービスマネジャーとセキュアエレメントとをインターフェース接続するためのシステム、方法、およびコンピュータプログラム製品
US9143383B2 (en) * 2012-11-01 2015-09-22 Miiicasa Taiwan Inc. Method and system for managing device identification
FR3013479B1 (fr) * 2013-11-21 2015-12-18 Oberthur Technologies Procede de notification a des fins de configuration d'un element securise
US9264899B2 (en) * 2013-12-19 2016-02-16 Nxp, B.V. Binding mobile device secure software components to the SIM
US10083323B1 (en) * 2014-12-31 2018-09-25 Wells Fargo Bank, N.A. Strategy based feature disablement
EP3091769A1 (en) * 2015-05-07 2016-11-09 Gemalto Sa Method of managing access to a service
ES2877142T3 (es) * 2015-12-01 2021-11-16 Ericsson Telefon Ab L M Anuncio de planificación de conocimiento de aplicación
CN106997530B (zh) 2016-01-25 2022-10-14 创新先进技术有限公司 基于移动终端卡模拟的信用支付方法及装置
CN106997527A (zh) 2016-01-25 2017-08-01 阿里巴巴集团控股有限公司 基于移动终端p2p的信用支付方法及装置
CN106255102B (zh) * 2016-07-26 2019-12-27 Oppo广东移动通信有限公司 一种终端设备的鉴定方法及相关设备
US11070982B1 (en) 2020-04-15 2021-07-20 T-Mobile Usa, Inc. Self-cleaning function for a network access node of a network
US11799878B2 (en) 2020-04-15 2023-10-24 T-Mobile Usa, Inc. On-demand software-defined security service orchestration for a 5G wireless network
US11444980B2 (en) 2020-04-15 2022-09-13 T-Mobile Usa, Inc. On-demand wireless device centric security for a 5G wireless network
US11824881B2 (en) 2020-04-15 2023-11-21 T-Mobile Usa, Inc. On-demand security layer for a 5G wireless network
US11057774B1 (en) 2020-05-14 2021-07-06 T-Mobile Usa, Inc. Intelligent GNODEB cybersecurity protection system
US11115824B1 (en) 2020-05-14 2021-09-07 T-Mobile Usa, Inc. 5G cybersecurity protection system
US11206542B2 (en) 2020-05-14 2021-12-21 T-Mobile Usa, Inc. 5G cybersecurity protection system using personalized signatures

Family Cites Families (29)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US5600708A (en) * 1995-08-04 1997-02-04 Nokia Mobile Phones Limited Over the air locking of user identity modules for mobile telephones
FI955188A (fi) * 1995-10-30 1997-06-24 Nokia Telecommunications Oy Matkaviestimen ohjelmiston ylläpito
US5864757A (en) * 1995-12-12 1999-01-26 Bellsouth Corporation Methods and apparatus for locking communications devices
US5898783A (en) * 1996-11-14 1999-04-27 Lucent Technologies, Inc. System and method for employing a telecommunications network to remotely disable a SIM or smartcard
FI105637B (fi) * 1997-07-02 2000-09-15 Sonera Oyj Menetelmä tilaajaidentiteettimoduulille tallennettujen sovellusten hallintaan
US20020062451A1 (en) * 1998-09-01 2002-05-23 Scheidt Edward M. System and method of providing communication security
US6553375B1 (en) * 1998-11-25 2003-04-22 International Business Machines Corporation Method and apparatus for server based handheld application and database management
JP3873624B2 (ja) * 1999-01-13 2007-01-24 株式会社日立製作所 モバイルコードの実行方法およびそのシステム
SE515047C2 (sv) * 1999-10-01 2001-06-05 Tryggit Ab Metod och system för verifiering av tjänstebeställning
US6804707B1 (en) * 2000-10-20 2004-10-12 Eric Ronning Method and system for delivering wireless messages and information to personal computing devices
JP2002141900A (ja) * 2000-11-01 2002-05-17 Nec Corp モバイルコンピューティングサービスシステム
CN1209937C (zh) * 2001-01-20 2005-07-06 三星电子株式会社 遥控移动终端的系统和方法
NO313480B1 (no) * 2001-01-24 2002-10-07 Telenor Asa Fremgangsmåte for å åpne hele eller deler av et smartkort
US7143441B2 (en) * 2001-05-08 2006-11-28 Aramira Corporation Wireless device mobile application security system
EP2261796A3 (en) * 2001-05-14 2011-02-23 NTT DoCoMo, Inc. System for managing program stored in storage block of mobile terminal
US20020188736A1 (en) * 2001-06-11 2002-12-12 Nokia Corporation System and method for controlling terminal application usage through subscriber-application association
US20020186845A1 (en) * 2001-06-11 2002-12-12 Santanu Dutta Method and apparatus for remotely disabling and enabling access to secure transaction functions of a mobile terminal
US6603968B2 (en) * 2001-06-22 2003-08-05 Level Z, L.L.C. Roaming in wireless networks with dynamic modification of subscriber identification
US20030041125A1 (en) * 2001-08-16 2003-02-27 Salomon Kirk C. Internet-deployed wireless system
JP4145118B2 (ja) * 2001-11-26 2008-09-03 松下電器産業株式会社 アプリケーション認証システム
HU224788B1 (hu) * 2002-02-07 2006-02-28 Enigma Software Rt Architektúra kiterjedt ügyfélkörben végrehajtható bankkártyás fizetési tranzakciók egyszerûsített hardverigényû lebonyolításához, tranzakciós terminálegység, bõvített funkciós SIM kártya, valamint eljárások megszemélyesítésre és tranzakciók lebonyolítására
SE0202450D0 (sv) * 2002-08-15 2002-08-15 Ericsson Telefon Ab L M Non-repudiation of digital content
US7088988B2 (en) * 2002-11-12 2006-08-08 Motorola Inc. Over-the-air subsidy lock resolution
US7181252B2 (en) * 2002-12-10 2007-02-20 Nokia Corporation System and method for performing security functions of a mobile station
US6944859B2 (en) * 2003-01-30 2005-09-13 Epocrates, Inc. System and method for automatically installing data on a handheld computer
JP4067985B2 (ja) * 2003-02-28 2008-03-26 松下電器産業株式会社 アプリケーション認証システムと装置
US20040205749A1 (en) * 2003-03-26 2004-10-14 Lockheed Martin Corporation System for enabling application software of data acquisition devices
US7269732B2 (en) * 2003-06-05 2007-09-11 Sap Aktiengesellschaft Securing access to an application service based on a proximity token
US20050021592A1 (en) * 2003-07-11 2005-01-27 Sandeep Patel Notification of subscriber status in a communications network

Also Published As

Publication number Publication date
EP1683388B1 (fr) 2013-07-10
RU2006114719A (ru) 2007-12-10
CN1875653A (zh) 2006-12-06
TW200526056A (en) 2005-08-01
ES2429136T3 (es) 2013-11-13
IL175254A0 (en) 2006-09-05
ZA200604291B (en) 2007-10-31
EP1530392A1 (fr) 2005-05-11
EP1683388A2 (fr) 2006-07-26
US20070274524A1 (en) 2007-11-29
WO2005046278A3 (fr) 2005-08-11
KR20060117319A (ko) 2006-11-16
AU2004307800B2 (en) 2009-01-08
CA2544759A1 (en) 2005-05-19
AU2004307800A1 (en) 2005-05-19
JP2007511122A (ja) 2007-04-26
WO2005046278A2 (fr) 2005-05-19
US8001615B2 (en) 2011-08-16

Similar Documents

Publication Publication Date Title
BRPI0415789A (pt) método para gerenciar a segurança de aplicativos com um módulo de segurança
Sirer et al. Logical attestation: An authorization architecture for trustworthy computing
Mann et al. A framework for static detection of privacy leaks in android applications
Provos Improving Host Security with System Call Policies.
Zhou et al. Detecting repackaged smartphone applications in third-party android marketplaces
DE69725833T2 (de) Gesicherte zweiteilige Benutzer-Authentifizierung in einem Rechnernetz
DE102011103218B4 (de) Systeme, Verfahren und Vorrichtung zum Virtualisieren von TPM- Zugriffen
US8752179B2 (en) System and method for removal of malicious software from computer systems and management of treatment side-effects
DE69815599T2 (de) Verfahren und Vorrichtung zum Schutz von Anwendungsdaten in sicheren Speicherbereichen
RU2606564C1 (ru) Система и способ блокировки выполнения сценариев
CN102270287B (zh) 一种提供主动安全服务的可信软件基
US10454971B2 (en) Managing privileged system access based on risk assessment
DE112010004885T5 (de) Bereitstellen von Integritätsüberprüfung und -bestätigung in einer verborgenen Ausführungsumgebung
DE112009004762T5 (de) System und verfahren zum durchführen einer verwaltunosoperation
US11501000B2 (en) Auto-injection of security protocols
DE102007030622A1 (de) Verfahren und Anwendung zum Verknüpfen zwischen Systemen auf der Grundlage von Hardware-Sicherheits-Einheiten
US9774605B2 (en) Temporary authorizations to access a computing system based on user skills
US20080313370A1 (en) Guarding Method For Input Data By Usb Keyboard and Guarding System
US20050131994A1 (en) Fine-grained authorization using mbeans
Moshchuk et al. Content-based isolation: rethinking isolation policy design on client systems
DE10110316A1 (de) Sichere Passworteingabe
CN101827091A (zh) 一种利用强制访问控制检测Solaris系统故障的方法
CN105787355A (zh) 一种安全软件进程权限管理方法和装置
CN101819548A (zh) 一种利用强制访问控制检测Linux系统故障的技术
CN111930752A (zh) 一种数据处理方法及相关设备

Legal Events

Date Code Title Description
B08F Application dismissed because of non-payment of annual fees [chapter 8.6 patent gazette]

Free format text: REFERENTE AS 8A, 9A, 10A, 11A E 12A ANUIDADES.

B08K Patent lapsed as no evidence of payment of the annual fee has been furnished to inpi [chapter 8.11 patent gazette]
B15K Others concerning applications: alteration of classification

Ipc: H04W 12/12 (2009.01), H04W 8/18 (2009.01)