Systems and methods for providing security services during power management mode

Patent metadata

Field	Value
Publication number	US-11947674-B2
Application number	US-202318376331-A
Country	US
Kind code	B2
Filing date	Oct 3, 2023
Priority date	Aug 4, 2008
Publication date	Apr 2, 2024
Grant date	Apr 2, 2024

Abstract

A method comprises detecting with a mobile security system a wake event on a mobile device, providing from the mobile security system a wake signal, the providing being in response to the wake event to wake a mobile device from a power management mode, and managing with the mobile security system security services of the mobile device. Managing security services may comprise scanning a hard drive of the mobile devices for viruses and/or other malware. Managing security services may also comprise updating security applications or scanning the mobile device for unauthorized data.

First claim

The invention claimed is:

1. A security system, comprising:
security system memory storing security system code and at least a portion of wake code, the security system code including a security engine, a security policy and security data for protecting a mobile device, the mobile device including a mobile device processor and including a security agent configured to cooperate with the security system;
a communication interface configured to communicate with the mobile device and configured to communicate over a network with a security administrator device, the security administrator device configured to configure the security system code and the at least a portion of wake code, the security administrator device having a security administrator processor different than the mobile device processor, the mobile device being remote from the security administrator device, the mobile device being a first computer system, the security system being a second computer system, the security administrator device being a third computer system, the first computer system, the second computer system and the third computer system being separate computer systems; and
a security system processor different than the mobile device processor and different than the security administrator processor, the security system processor configured to:
process the at least a portion of wake code, the wake code being configured to detect a wake event and to send a wake signal to the mobile device in response to detecting the wake event, the security agent of the mobile device being configured to receive the wake signal, the security agent of the mobile device being configured to wake at least a portion of the mobile device from a power management mode in response to receiving the wake signal;
detect by the wake code a particular wake event;
prepare by the wake code a particular wake signal in response to detecting the particular wake event;
send by the wake code the particular wake signal to the mobile device in response to detecting the particular wake event, the security agent of the mobile device being configured to wake the at least a portion of the mobile device in response to receiving the particular wake signal; and
process the security system code to check integrity of the mobile device after the at least a portion of the mobile device has been woken, the integrity check including at least one of firewall services, antivirus services, or malicious content filtering services.

2. The security system of claim 1 , wherein the communication interface is configured to communicate with the mobile device via a wireless connection.

3. The security system of claim 1 , wherein the communication interface is configured to communicate with the mobile device via an external port.

4. The security system of claim 1 , wherein the communication interface is configured to communicate with the mobile device via an internal port.

5. The security system of claim 1 , wherein the particular wake event includes at least receiving an alert from a security administrator and determining that the alert is authentic.

6. The security system of claim 1 , wherein the particular wake event includes at least detecting that a predetermined time has elapsed.

7. The security system of claim 1 , wherein the particular wake event includes at least detecting a predetermined clock time.

8. The security system of claim 1 , wherein the security system processor is further configured to remove unauthorized data from the mobile device in response to the integrity check.

9. The security system of claim 1 , wherein the security system processor is further configured to uninstall applications from the mobile device in response to the integrity check.

10. The security system of claim 1 , wherein the security system processor is further configured to re-image the mobile device in response to the integrity check.

11. The security system of claim 1 , wherein the security system processor is further configured to send log information to the security administrator device or another security administrator device in response to the integrity check.

12. A non-transitory computer readable medium in a security system, the non-transitory computer readable medium storing:
at least a portion of wake code executable by a security system processor of the security system, the wake code when executed by the security system processor being configured to detect a wake event, prepare a particular wake signal in response to detecting the wake event, and to send a wake signal to the mobile device in response to detecting the wake event, the mobile device including a mobile device processor and a security agent configured to cooperate with the security system, the security agent of the mobile device being configured to receive the wake signal and to wake at least a portion of the mobile device from a power management mode in response to receiving the wake signal, the mobile device being a first computer system, the security system being a second computer system, the security administrator device being a third computer system, the first computer system, the second computer system and the third computer system being separate computer systems;
security system code executable by the security system processor and configured to check integrity of the mobile device after the at least a portion of the mobile device has been woken, the security system code including a security engine, a security policy and security data for protecting a mobile device, the security system processor being different than the mobile device processor, the integrity check including at least one of firewall services, antivirus services, or malicious content filtering services; and
a communication interface when executed by the security system processor configured to send the particular wake signal to the mobile device.

13. The non-transitory computer readable medium of claim 12 , wherein the communication interface is configured to send the particular wake signal to the mobile device via a wireless connection.

14. The non-transitory computer readable medium of claim 12 , wherein the communication interface is configured to communicate with the mobile device via an external port.

15. The non-transitory computer readable medium of claim 12 , wherein the communication interface is configured to communicate with the mobile device via an internal port.

16. The non-transitory computer readable medium of claim 12 , wherein the particular wake event includes at least receiving an alert from a security administrator and determining that the alert is authentic.

17. The non-transitory computer readable medium of claim 12 , wherein the particular wake event includes at least detecting that a predetermined time has elapsed.

18. The non-transitory computer readable medium of claim 12 , wherein the particular wake event includes at least detecting a predetermined clock time.

19. The non-transitory computer readable medium of claim 12 , wherein the security system code is configured to remove unauthorized data from the mobile device.

20. The non-transitory computer readable medium of claim 12 , wherein the security system code is configured to uninstall applications from the mobile device.

21. The non-transitory computer readable medium of claim 12 , wherein the security system code is configured to re-image the mobile device.

22. The non-transitory computer readable medium of claim 12 , wherein the security system code is con

Assignees

• Cupp Computing As

Inventors

• Oz Ami
• Touboul Shlomo

Classifications

• G06F21/57 Primary

  Certifying or maintaining trusted computer platforms, e.g. secure boots or power-downs, version controls, system software checks, secure updates or assessing vulnerabilities · CPC title

• G06F1/3209

  Monitoring remote activity, e.g. over telephone lines or network connections · CPC title

• G06F21/56

  Computer malware detection or handling, e.g. anti-virus arrangements · CPC title

• H04L63/14

  for detecting or protecting against malicious traffic · CPC title

• H04L63/1408

  by monitoring network traffic (monitoring network traffic per se H04L43/00) · CPC title