Proactive security for mobile devices

Patent metadata

Field	Value
Publication number	US-10129756-B2
Application number	US-201614995155-A
Country	US
Kind code	B2
Filing date	Jan 13, 2016
Priority date	Dec 14, 2009
Publication date	Nov 13, 2018
Grant date	Nov 13, 2018

Abstract

Methods, program products, and systems for proactively securing mobile devices are described. A mobile device can proactively determine whether the mobile device is associated with a security risk and the level of the security risk. Upon determining a security risk, the mobile device can transmit coordinates of its current geographic location to a server. To protect privacy of authorized users, the transmission can be disabled by entering a password. If multiple failed password attempts are detected, the mobile device can proactively increase a security level of the device, and selectively protect files or other content stored on the mobile device. In some implementations, the mobile device can be transitioned into a surveillance mode where the mobile device records or captures information associated with one or more of user actions, ambient sound, images, a trajectory of the device, and transmits the recorded or captured information to the network resource.

First claim

What is claimed is:

1. A method executed by a mobile device, the method comprising:
detecting a security event occurring at the mobile device that indicates an unauthorized access of the mobile device;
in response to detecting the security event, identifying, among a plurality of risk factors, a risk factor that corresponds to a level of the unauthorized access, wherein each risk factor of the plurality of risk factors corresponds to a respective different information security scheme; and
in response to identifying the risk factor:
performing at least one security act that includes sending a security alert to a server, wherein the security alert identifies a current security status of the mobile device and a description of the security event, and
setting the mobile device to a secure mode of operation that causes the mobile device to selectively protect individual data items managed by the mobile device in accordance with the respective different information security scheme.

2. The method of claim 1 , wherein performing the at least one security act further includes:
displaying a security warning on the mobile device indicating the mobile device will be operating under the secure mode;
creating at least one simulated password on the mobile device;
receiving a login request that includes the at least one simulated password;
submitting location information of the mobile device to the server; and
disabling user applications on the mobile device.

3. The method of claim 1 , wherein performing the at least one security act further includes:
displaying a security warning on the mobile device indicating the mobile device will be operating under the secure mode;
recording user actions on the mobile device; and
transmitting the user actions to the server.

4. The method of claim 3 , wherein recording the user actions comprises recording a telephone call, and includes:
displaying a reminder that telephone numbers dialed and audio conversations will be recorded;
recording a phone number dialed after the reminder has been displayed; and
recording audio conversations of the telephone call.

5. The method of claim 1 , wherein performing the at least one security act further includes:
displaying a security warning on the mobile device indicating the mobile device will be operating under the secure mode; and
after displaying the security warning:
capturing visual images using a digital camera of the mobile device; and
transmitting the visual images to the server.

6. The method of claim 1 , wherein the at least one security act further comprises:
display a security warning on the mobile device, the security warning including a current location of the mobile device and contact information of a user of the mobile device.

7. The method of claim 1 , wherein evaluating the risk factor includes:
determining that a number of incorrect passwords has exceeded a security threshold, and
determining that at least some of the incorrect passwords are included in a password list.

8. A mobile device, comprising:
at least one processor; and
at least one memory configured to store instructions that, when executed by the at least one processor, cause the mobile device to carry out steps that include:
detecting a security event occurring at the mobile device that indicates an unauthorized access of the mobile device;
in response to detecting the security event, identifying, among a plurality of risk factors, a risk factor that corresponds to a level of the unauthorized access, wherein each risk factor of the plurality of risk factors corresponds to a respective different information security scheme; and
in response to identifying the risk factor:
performing at least one security act that includes sending a security alert to a server, wherein the security alert identifies a current security status of the mobile device and a description of the security event, and
setting the mobile device to a secure mode of operation that causes the mobile device to selectively protect individual data items managed by the mobile device in accordance with the respective different information security scheme.

9. The mobile device of claim 8 , wherein performing the at least one security act further includes:
displaying a security warning on the mobile device indicating the mobile device will be operating under the secure mode;
creating at least one simulated password on the mobile device;
receiving a login request that includes the at least one simulated password;
submitting location information of the mobile device to the server; and
disabling user applications on the mobile device.

10. The mobile device of claim 8 , wherein performing the at least one security act further includes:
displaying a security warning on the mobile device indicating the mobile device will be operating under the secure mode;
recording user actions on the mobile device; and
transmitting the user actions to the server.

11. The mobile device of claim 10 , wherein recording the user actions comprises recording a telephone call, including:
displaying a reminder that telephone numbers dialed and audio conversations will be recorded;
recording a phone number dialed after the reminder has been displayed; and
recording audio conversations of the telephone call.

12. The mobile device of claim 8 , wherein performing the at least one security act further includes:
displaying a security warning on the mobile device indicating the mobile device will be operating under the secure mode; and
after displaying the security warning:
capturing visual images using a digital camera of the mobile device; and
transmitting the visual images to the server.

13. The mobile device of claim 8 , wherein evaluating the risk factor includes:
determining that a number of incorrect passwords has exceeded a security threshold, and
determining that at least some of the incorrect passwords are included in a password list.

14. At least one non-transitory computer readable storage medium configured to store instructions that, when executed by at least one processor included in a mobile device, cause the mobile device to carry out steps that include:
detecting a security event occurring at the mobile device that indicates an unauthorized access of the mobile device;
in response to detecting the security event, identifying, among a plurality of risk factors, a risk factor that corresponds to a level of the unauthorized access, wherein each risk factor of the plurality of risk factors corresponds to a respective different information security scheme; and
in response to identifying the risk factor:
performing at least one security act that includes sending a security alert to a server, wherein the security alert identifies a current security status of the mobile device and a description of the security event, and

setting the mobile device to a secure mode of operation that causes the mobile device to selectively protect individual data items managed by the mobile device in accordance with the respective different information security scheme.

15. The at least one non-transitory computer readable storage medium of claim 14 , wherein performing the at least one security act further includes:
displaying a security warning on the mobile device indicating the mobile device will be operating under the secure mode;
creating at least one simulated password on the mobile device;
receiving a login request that includes the at least one simulated password;
submitting location information of the mobile device to the server; and
disabling user applications

Assignees

• Apple Inc

Inventors

• Borghei Hooman

Classifications

• H04W12/08 Primary

  Access security · CPC title

• H04W4/14

  Short messaging services, e.g. short message services [SMS] or unstructured supplementary service data [USSD] · CPC title

• H04M1/673

  the user being required to key in a code · CPC title

• H04W12/12 Primary

  Detection or prevention of fraud · CPC title

• H04M3/42221

  Conversation recording systems (at the subscriber's set H04M1/656) · CPC title