Controlling data download to subscriber equipment

Abstract

Code that is to be downloaded to a node (50) from across an unsecure network (12), such as the internet, is routed to a sanity check-point function (44) supporting an emulator of the node (50). Only after an interoperability and compatibility assessment has been undertaken (112, 128) by having the downloaded code run (122-126) on the emulator does the code get passed (116, 134) to the node for software upgrade, application augmentation or content review purposes. A system operator (or system administrator) can therefore regulate software upgrades to mitigate potentially catastrophic software upgrades that would otherwise adversely affect, for example, mobile unit operation. Once code has been assessed, then it can either be stored (108, 132) in a code and fault repository (46) for future use with identical node-originating requests or it can be discarded and labelled as operating-system incompatible within code and fault repository (46).

Description

field of invention [0001] The present invention relates generally to communication systems for controlling the downloading of data to adaptable user equipment, and is particularly, but not exclusively, applicable to applications used in downloadable terminals such as third generation wireless communication devices. adjust. Background technique [0002] With the development of communication technologies, users' requirements for personalized user equipment functions that meet individual (or group) requirements continue to increase. Such user equipment may take many forms, including (but not limited to): i) so-called software-defined radio proposed in third-generation cellular systems, such as Universal Mobile Telecommunications System (UMTS); and ii) programmable terminal equipment , such as computers on a local area network (LAN). [0003] For quite some time, downloading software was an aspiration. Now, with the development of Internet access and packet transmission techn...

AI Technical Summary

Problems solved by technology

The first type of security attack is not as easy to deal with based on providing a secure communication link

[0008] The second type of security attack directly changes functionality (by breaking code) in the subscriber unit or host processor

Second, so-called Trojan horse attacks can cause the processing system to appear to be doing / executing the requested program, but the processing system is actually doing something nefarious and in addition to the requesting program, such as Control is effectively taken over by a third party unrelated to the legal owner

Third, uplink messages for software downloads are intercepted and a fake addressing server (by a third party) causes malicious or hostile code to be downloaded to the processor requesting the download

Fourth, the associated user unit or server downloading the software may overflow due to pseudocode

Fifth, third-party hackers can compromise the security of the server by modifying the software and content on the server before the software download process begins

This kind of firewall / proxy mechanism for the Internet is very crude (for example, filtering all javaScript, blocking all access to http: / / hackedcode.com), and cannot meet the needs of various channels in today's developing communication environment

Images