Proactive security for mobile devices

Patent metadata

Field	Value
Publication number	US-9258715-B2
Application number	US-63764009-A
Country	US
Kind code	B2
Filing date	Dec 14, 2009
Priority date	Dec 14, 2009
Publication date	Feb 9, 2016
Grant date	Feb 9, 2016

Abstract

Methods, program products, and systems for proactively securing mobile devices are described. A mobile device can proactively determine whether the mobile device is associated with a security risk and the level of the security risk. Upon determining a security risk, the mobile device can transmit coordinates of its current geographic location to a server. To protect privacy of authorized users, the transmission can be disabled by entering a password. If multiple failed password attempts are detected, the mobile device can proactively increase a security level of the device, and selectively protect files or other content stored on the mobile device. In some implementations, the mobile device can be transitioned into a surveillance mode where the mobile device records or captures information associated with one or more of user actions, ambient sound, images, a trajectory of the device, and transmits the recorded or captured information to the network resource.

First claim

What is claimed is:

1. A computer-implemented method for remotely managing a mobile device, the method comprising:
at a host computer, and in response to receiving a request from an entity other than the mobile device:
transmitting a first security command to the mobile device, wherein the first security command causes the mobile device to gather at least one security parameter;
receiving, from the mobile device and in response to the first security command, the least one security parameter;
calculating, based on the at least one security parameter, a security risk factor associated with the mobile device, wherein the security risk factor corresponds to a first data security scheme of a plurality of data security schemes, and each data security scheme of the plurality of data security schemes defines a set of actions to be carried out when the data security scheme is applied at the mobile device;
causing the entity to display information associated with (i) the at least one security parameter, and (ii) the security risk factor; and
transmitting, to the mobile device, a second security command, wherein the second security command causes the mobile device to:
(i) apply the first data security scheme by carrying out each action in the set of actions defined by the first data security scheme, and
(ii) enter a mode that enables the mobile device to autonomously apply a second security scheme that is different from the first data security scheme when the mobile device identifies a condition that corresponds to the second data security scheme.

2. The computer-implemented method of claim 1 , wherein the at least one security parameter includes coordinates of a geographical location of the mobile device.

3. The computer-implemented method of claim 1 , wherein an action in the set of actions involves deactivating user installed programs on the mobile device and scrambling at least a portion of user data on the mobile device.

4. The computer-implemented method of claim 1 , wherein an action in the set of actions involves erasing information user data stored on the mobile device.

5. The computer-implemented method of claim 1 , wherein an action in the set of actions involves recording activities and transmitting information about the activities to the host computer.

6. The computer-implemented method of claim 1 , wherein the at least one security parameter comprises a change in music preferences indicated by a change in music downloaded onto the mobile device.

7. The computer-implemented method of claim 1 , wherein the at least one security parameter comprises a number of password inputs that do not match a correct user password.

8. A system configured to remotely manage a mobile device, the system comprising:
a processor; and
a memory configured to store instructions that, when executed by the processor, cause the system to carry out steps that include:
receiving a request from an entity other than the mobile device;
in response to the request, transmitting a first security command to the mobile device, wherein the first security command causes the mobile device to gather at least one security parameter;
receiving, from the mobile device and in response to the first security command, the least one security parameter;
calculating, based on the at least one security parameter, a security risk factor associated with the mobile device, wherein the security risk factor corresponds to a first data security scheme of a plurality of data security schemes, and each data security scheme of the plurality of data security schemes defines a set of actions to be carried out when the data security scheme is applied at the mobile device;
causing the entity to display information associated with (i) the at least one security parameter, and (ii) the security risk factor; and
transmitting, to the mobile device, a second security command, wherein the second security command causes the mobile device to:
(i) apply the first data security scheme by carrying out each action in the set of actions defined by the first data security scheme, and
(ii) enter a mode that enables the mobile device to autonomously apply a second security scheme that is different from the first data security scheme when the mobile device identifies a condition that corresponds to the second data security scheme.

9. The system of claim 8 , wherein the at least one security parameter includes coordinates of a geographical location of the mobile device.

10. The system of claim 8 , wherein an action in the set of actions involves deactivating user installed programs on the mobile device and scrambling at least a portion of user data on the mobile device.

11. The system of claim 8 , wherein an action in the set of actions involves erasing information user data stored on the mobile device.

12. The system of claim 8 , wherein an action in the set of actions involves recording activities and transmitting information about the activities to the system.

13. The system of claim 8 , wherein the at least one security parameter comprises a change in music preferences indicated by a change in music downloaded onto the mobile device.

14. The system of claim 8 , wherein the at least one security parameter comprises a number of password inputs that do not match a correct user password.

15. A non-transitory computer readable storage medium configured to store instructions that, when executed by a processor included in a computing device, cause the computing device to remotely manage a mobile device, by carrying out steps that include:
receiving a request from an entity other than the mobile device;
in response to the request, transmitting a first security command to the mobile device, wherein the first security command causes the mobile device to gather at least one security parameter;
receiving, from the mobile device and in response to the first security command, the least one security parameter;
calculating, based on the at least one security parameter, a security risk factor associated with the mobile device, wherein the security risk factor corresponds to a first data security scheme of a plurality of data security schemes, and each data security scheme of the plurality of data security schemes defines a set of actions to be carried out when the data security scheme is applied at the mobile device;
causing the entity to display information associated with (i) the at least one security parameter, and (ii) the security risk factor; and
transmitting, to the mobile device, a second security command, wherein the second security command causes the mobile device to:
(i) apply the first data security scheme by carrying out each action in the set of actions defined by the first data security scheme, and
(ii) enter a mode that enables the mobile device to autonomously apply a second security scheme that is different from the first data security scheme when the mobile device identifies a condition that corresponds to the second data security scheme.

16. The non-transitory computer readable storage medium of claim 15 , wherein the at least one security parameter includes coordinates of a geographical location of the mobile device.

17. The non-transitory computer readable storage medium of claim 15 , wherein an action in the set of actions involves deactivating user installed programs on the mobile device and scrambling at least a portion of user data on the mobile device.

18. The non-transitory computer readable storage medium of claim 15 , wherein an action in the set of actions involves erasing information user

Assignees

• Borghei Hooman
• Apple Inc

Inventors

• Borghei Hooman

Classifications

• H04W12/12 Primary

  Detection or prevention of fraud · CPC title

• H04M1/673

  the user being required to key in a code · CPC title

• H04W4/14

  Short messaging services, e.g. short message services [SMS] or unstructured supplementary service data [USSD] · CPC title

• H04M3/42221

  Conversation recording systems (at the subscriber's set H04M1/656) · CPC title

• H04W12/08 Primary

  Access security · CPC title