Smart containerization of mobile computing device resources

Patent metadata

Field	Value
Publication number	US-9268935-B2
Application number	US-201414283697-A
Country	US
Kind code	B2
Filing date	May 21, 2014
Priority date	Feb 24, 2014
Publication date	Feb 23, 2016
Grant date	Feb 23, 2016

Abstract

A method includes monitoring metrics at a mobile computing device. A substantive change in operating conditions is identified, based upon the monitored metrics. In response to the substantive change in the operating conditions, a smart container is automatically applied to a particular resource of the computing device. The smart container may define an enhanced security access policy. In accordance with a particular embodiment of the disclosure, the enhanced security access policy increases the level of protection to the resource.

First claim

What is claimed is:

1. A method, comprising:
monitoring metrics at a mobile computing device;
identifying a change in operating conditions, based upon the monitored metrics; and
in response to the change in the operating conditions, automatically applying a smart container to a particular resource of the mobile computing device, the smart container defining an enhanced security access policy;
wherein the enhanced security access policy increases the level of protection to the particular resource; and
wherein the metrics comprise a time, a date, a digital signature of the mobile computing device, network activity, a volume of data sent or received from the mobile computing device, a location of the mobile computing device, a location of a remote resource that the mobile computing device is attempting to communicate with, a device IP address, and a level of certainty of user identity based upon an authentication level of the user.

2. The method of claim 1 , further comprising selecting the smart container from a plurality of available smart containers, based upon a level of threat associated with the change in the operating conditions.

3. The method of claim 1 , wherein the enhanced security policy is selected by the smart container based at least in part upon a level of threat associated with the change in the operating conditions.

4. The method of claim 1 , wherein the smart container is further operable to simulate a specific resource type of the particular resource to the operating system, to allow the operating system and the particular resource to continue interacting in the same manner that the operating system and the particular resource would communicate in the absence of the smart container.

5. A computer configured to access a storage device, the computer comprising:
a hardware processor; and
a non-transitory, computer-readable storage medium storing computer-readable instructions that when executed by the hardware processor cause the computer to perform:
monitoring metrics at a mobile computing device;
identifying a change in operating conditions, based upon the monitored metrics; and
in response to the change in the operating conditions, automatically applying a smart container to a particular resource of the mobile computing device, the smart container defining an enhanced security access policy;
wherein the enhanced security access policy increases the level of protection to the particular resource; and
wherein the metrics comprise a time, a date, a digital signature of the mobile computing device, network activity, a volume of data sent or received from the mobile computing device, a location of the mobile computing device, a location of a remote resource that the mobile computing device is attempting to communicate with, a device IP address, and a level of certainty of user identity based upon an authentication level of the user.

6. The computer of claim 5 , wherein the computer-readable instructions further cause the computer to perform selecting the smart container from a plurality of available smart containers, based upon a level of threat associated with the change in the operating conditions.

7. The computer of claim 5 , wherein the enhanced security policy is selected by the smart container based at least in part upon a level of threat associated with the change in the operating conditions.

8. The computer of claim 5 , wherein the smart container is further operable to simulate a specific resource type of the particular resource to the operating system, to allow the operating system and the particular resource to continue interacting in the same manner that the operating system and the particular resource would communicate in the absence of the smart container.

9. A computer program product, comprising:
a non-transitory computer-readable storage medium having computer-readable program code embodied therewith, the computer-readable program code comprising: computer-readable program code configured to monitor metrics at a mobile computing device; computer-readable program code configured to identify a change in operating conditions, based upon the monitored metrics; and
computer-readable program code configured to, in response to the change in the operating conditions, automatically applying a smart container to a particular resource of the mobile computing device, the smart container defining an enhanced security access policy; and
wherein the enhanced security access policy increases the level of protection to the particular resource; and
wherein the metrics comprise a time, a date, a digital signature of the mobile computing device, network activity, a volume of data sent or received from the mobile computing device, a location of the mobile computing device, a location of a remote resource that the mobile computing device is attempting to communicate with, a device IP address, and a level of certainty of user identity based upon an authentication level of the user.

10. The computer program product of claim 8 , wherein the computer readable program code is further configured to select the smart container from a plurality of available smart containers, based upon a level of threat associated with the change in the operating conditions.

11. The computer program product of claim 8 , wherein the enhanced security policy is selected by the smart container based at least in part upon a level of threat associated with the change in the operating conditions.

12. The computer program product of claim 8 , wherein the smart container is further operable to simulate a specific resource type of the particular resource to the operating system, to allow the operating system and the particular resource to continue interacting in the same manner that the operating system and the particular resource would communicate in the absence of the smart container.

Assignees

• Lindo Jonathan
• Lakamsani Vamsee
• Krishna Vikas
• Prabhu Nagi
• Ca Inc

Inventors

• Lindo Jonathan
• Lakamsani Vamsee
• Krishna Vikas
• Prabhu Nagi

Classifications

• G06F21/577

  Assessing vulnerabilities and evaluating computer system security · CPC title

• G06F21/6236

  between heterogeneous systems · CPC title

• G06F21/53 Primary

  by executing in a restricted environment, e.g. sandbox or secure virtual machine · CPC title

• H04W12/64

  using geofenced areas · CPC title

• H04W12/61

  Time-dependent · CPC title