System and method for assessing an application to be installed on a mobile communications device

Patent metadata

Field	Value
Publication number	US-9740852-B2
Application number	US-201313896852-A
Country	US
Kind code	B2
Filing date	May 17, 2013
Priority date	Oct 21, 2008
Publication date	Aug 22, 2017
Grant date	Aug 22, 2017

Abstract

A system and method checks for harmful behavior of an application to be installed on a mobile communications device. A server computer receives from the mobile communications device data pertaining to the application to be installed and information pertaining to the mobile communications device. The server processes the data and information to determine an assessment for the application to be installed. The assessment is provided to the mobile communications device and the assessment is displayed on the device if the assessment is one of dangerous and potentially dangerous.

First claim

What is claimed is:

1. A method of for blocking an application from being installed on a mobile communications device, the method comprising:
receiving at a server computer from the mobile communications device, the mobile communications device not having installed the application, data pertaining to the application including one or more of application name, application size, application SHA1 value, application version, application metadata, application traffic IP address, application communication port and URL associated with the application, and information pertaining to the mobile communications device;
processing, by the server computer, the data and the information to determine an assessment for the application, the assessment being based upon an analysis of an instance of the application or a similar application in a virtual or physical device using data and information received by the server computer from sources other than the mobile communications device, the assessment including an assessment value from a graduated series of assessment values; and
providing the assessment to the mobile communications device,
the assessment value causing the installation of the application to be blocked when: (i) the mobile communications device compares the assessment value to a permitted range of assessment values, the permitted range being set by a user or an administrator of the mobile communications device before the assessment is provided to the mobile communications device; and (ii) the mobile communications device determines that the assessment value is not in the permitted range.

2. The method of claim 1 , further comprising:
when the assessment includes an indication that the application is harmful, displaying the assessment and an alert on the mobile communications device.

3. The method of claim 1 , wherein the information pertaining to the mobile communications device is from a group consisting of device data, device operating system, firmware version, memory capacity, available communication ports, battery limitations, hardware characteristics, default specifications, service provider and IP address.

4. The method of claim 1 , wherein the application is side-loaded onto the mobile communications device.

5. The method of claim 1 , wherein the application is provided to the mobile communications device by an application marketplace.

6. The method of claim 1 , wherein the assessment is further based upon data and information received by the server computer from other devices similar to the mobile communications device.

7. A non-transitory computer readable storage medium for use with a server computer, the non-transitory computer readable storage medium containing computer readable instructions, which when executed by a processor cause the processor to perform the steps of a method for blocking an application from being installed on a mobile communications device, the method comprising:
receiving at a server computer from the mobile communications device, the mobile communications device not having installed the application, data pertaining to the application including one or more of application name, application size, application SHA1 value, application version, application metadata, application traffic IP address, application communication port and URL associated with the application, and information pertaining to the mobile communications device;
processing, by the server computer, the data and the information to determine an assessment for the application, the assessment being based upon an analysis of an instance of the application or a similar application in a virtual or physical device using data and information received by the server computer from sources other than the mobile communications device, the assessment including an assessment value from a graduated series of assessment values; and
providing the assessment to the mobile communications device,
the assessment value causing the installation of the application to be blocked when: (i) the mobile communications device compares the assessment value to a permitted range of assessment values, the permitted range being set by a user or an administrator of the mobile communications device before the assessment is provided to the mobile communications device; and (ii) the mobile communications device determines that the assessment value is not in the permitted range.

8. The non-transitory computer readable storage medium of claim 7 , further comprising:
when the assessment includes an indication that the application is harmful, displaying the assessment and an alert on the mobile communications device.

9. The non-transitory computer readable storage medium of claim 7 ,
wherein the information pertaining to the mobile communications device is from a group consisting of device data, device operating system, firmware version, memory capacity, available communication ports, battery limitations, hardware characteristics, default specifications, service provider and IP address.

10. The non-transitory computer readable storage medium of claim 7 , wherein when application is side-loaded onto the mobile communications device.

11. The non-transitory computer readable storage medium of claim 7 , wherein the application is provided to the mobile communications device by an application marketplace.

12. The non-transitory computer readable storage medium of claim 7 , wherein the assessment is further based upon data and information received by the server computer from other devices similar to the mobile communications device.

13. A method for allowing an application to be installed on a mobile communications device, the method comprising:
receiving at a server computer from the mobile communications device, the mobile communications device not having installed the application, data pertaining to the application including one or more of application name, application size, application SHA1 value, application version, application metadata, application traffic IP address, application communication port and URL associated with the application, and information pertaining to the mobile communications device;
processing, by the server computer, the data and the information to determine an assessment for the application, the assessment being based upon an analysis of an instance of the application or a similar application in a virtual or physical device using data and information received by the server computer from sources other than the mobile communications device, the assessment including an assessment value from a graduated series of assessment values; and
providing the assessment to the mobile communications device,
the assessment value causing the initiation of the installation of the application on the mobile communications device when: (i) the mobile communications device compares the assessment value to a permitted range of assessment values, the permitted range being set by a user or an administrator of the mobile communications device before the assessment is provided to the mobile communications device; and (ii) the mobile communications device determines that the assessment value is in the permitted range.

14. The method of claim 13 , the assessment, when processed by the mobile communications device, causing a message to be displayed on the mobile communications device.

15. A non-transitory computer readable storage medium for use with a server computer, the non-transitory computer readable storage medium containing computer readable instructions, which when executed by a processor cause the processor to perform the steps of a method for allowing an application t

Assignees

• Lookout Inc

Inventors

• Mahaffey Kevin Patrick
• Hering John Gunther
• Burgess James David
• Grubb Jonathan Pantera
• Golombek David
• Richardson David Luke
• Lineberry Anthony Mckay
• Wyatt Timothy Micheal

Classifications

• G06F11/3013

  where the computing system is an embedded system, i.e. a combination of hardware and software dedicated to perform a certain function in mobile devices, printers, automotive or aircraft systems (testing or monitoring of control systems or parts thereof G05B23/02) · CPC title

• G06F2212/171

  Portable consumer electronics, e.g. mobile phone · CPC title

• G06F21/50 Primary

  Monitoring users, programs or devices to maintain the integrity of platforms, e.g. of processors, firmware or operating systems · CPC title

• G06F21/564 Primary

  by virus signature recognition · CPC title