Method for performing device security corrective actions based on loss of proximity to another device

Patent metadata

Field	Value
Publication number	US-9763097-B2
Application number	US-201615219171-A
Country	US
Kind code	B2
Filing date	Jul 25, 2016
Priority date	Mar 13, 2013
Publication date	Sep 12, 2017
Grant date	Sep 12, 2017

Abstract

The method disclosed herein provides for performing device security corrective action based on loss of proximity to another device, such as a key device. While a mobile communication device is locked, a mobile communication device determines whether or not a key device is within a specified distance. If the key device is not within the specified distance from the mobile communication device, a notification may be displayed on the mobile communication device. If a user responds to the notification, the user may prevent or alter the mobile communication device from performing at least one device security corrective action. If, however, the user does not respond to the notification within a specified time period, the at least one device security corrective action is performed on the mobile communication device.

First claim

What is claimed is:

1. A method comprising:
while a mobile communication device is locked, generating a first determination, by a proximity detection module in the mobile communication device, that a key device is not within a specified distance from the mobile communication device;
based on the first determination that the key device is not within the specified distance from the mobile communication device, initiating a first timer configured to expire after a first period of time has elapsed while the mobile communication device is locked;
generating a second determination, by the proximity detection module in the mobile communication device, that the key device is not within the specified distance from the mobile communication device during the first period of time;
based on the second determination that the key device is not within the specified distance from the mobile communication device, displaying, after the expiration of the first timer, a notification on the mobile communication device and initiating a second timer configured to expire after a second period of time;
generating a third determination, by the proximity detection module in the mobile communication device, that the key device is not within the specified distance from the mobile communication device during the second period of time;
based on the third determination that the key device is not within the specified distance from the mobile communication device, performing at least a first device security corrective action on the mobile communication device after the expiration of the second period of time when a response to the notification is not received from a user before the expiration of the second timer.

2. The method of claim 1 , further comprising:
resetting the second timer for the second period of time based on a determination that the key device is within the specified distance from the mobile communication device prior to the end of the second period of time.

3. The method of claim 1 , further comprising:
sending a message to a computing device associated with an administrator based on the second determination that the key device is not within the specified distance from the mobile communication device and the determination that the response to the notification was not received prior to the second period of time expiring, wherein the notification includes a request to authenticate the user;
receiving a response to the message, the response to the message includes instructions from the computing device associated with the administrator to perform at least one of the first device security corrective action and a second device security corrective action;
performing at least one of the first device security corrective action and the second device security corrective action based on the received instructions.

4. The method of claim 1 , further comprising:
resetting the first timer for the first period of time based on a determination that the key device is within the specified distance from the mobile communication device prior to the end of the first period of time.

5. The method of claim 1 wherein the mobile communication device comprises an operating system.

6. The method of claim 1 wherein at least one of the steps of generating the first determination, generating the second determination, and generating the third determination that the key device is not within the specified distance from the mobile communication device comprises:
determining that the distance between the mobile communication device and the key device is above a specified distance threshold.

7. The method of claim 1 , further comprising:
sending the notification to the key device based on the determination that the key device is not within the specified distance from the mobile communication device.

8. The method of claim 7 , wherein the notification causes the key device to generate at least one of an audible sound, a haptic behavior, and a visual stimulus.

9. The method of claim 1 , further comprising:
receiving the response to the notification from the user prior to the end of the second period of time, wherein the response includes at least one of user credentials and an alternative required action by the user; and
resetting the second timer for the second period of time based on receiving the response to the notification from the user prior to the end of the second period of time.

10. The method of claim 9 , wherein the alternative required action includes at least one of the following actions: putting the mobile communication device into a Bluetooth only mode, disabling a GPS receiver within the mobile communication device, disabling a camera within the mobile communication device, disabling a microphone within the mobile communication device, disabling a specific communication protocol associated with the mobile communication device, deleting files on the mobile communication device, un-installing one or more applications on the mobile communication device, removing one or more certificates associated with the mobile communication device, suspending execution of an application on the mobile communication device, and terminating execution of an application on the mobile communication device.

11. The method of claim 1 , further comprising:
resetting the first timer for the first period of time based on not receiving the response to the notification within the second period of time.

12. The method of claim 1 wherein at least one of the steps of generating the first determination, generating the second determination, and generating the third determination that the key device is not within the specified distance from the mobile communication device comprises:
broadcasting a message from the mobile communication device over a network for the key device; and
not receiving a reply from the key device responsive to the broadcasted message.

13. The method of claim 1 , wherein the notification causes the mobile communication device to generate at least one of an audible sound, a haptic behavior, and a visual stimulus.

14. The method of claim 1 , further comprising:
determining if the first timer has expired based on the second determination that the key device is not within the specified distance from the mobile communication device;
generating at least one other determination that the key device is not within the specified distance from the mobile communication device before the first timer expires.

15. The method of claim 1 , further comprising:
determining if the second timer has expired based on the third determination that the key device is not within the specified distance from the mobile communication device;
generating at least one other determination that the key device is not within the specified distance from the mobile communication device before the first timer expires.

16. A mobile communication device comprising:
a processor; and
one or more stored sequences of instructions which, when executed by the processor cause the processor to carry out the steps of:
generating a first determination, by a proximity detection module, that a key device is not within a specified distance from the mobile communication device;
based on the first determination that the key device is not within the specified distance from the mobile communication device, initiating a first timer configured to expire after a first period of time has elapsed;
generating a second determination, by the proximity detection module, that the key device is not within the specified distance from the mobile communication device during the first pe

Assignees

• Lookout Inc

Inventors

• Robinson William
• Mahaffey Kevin Patrick
• Buck Brian James

Classifications

• H04W12/08 Primary

  Access security · CPC title

• H04L63/0853

  using an additional device, e.g. smartcard, SIM or a different communication terminal (cryptographic mechanisms or cryptographic arrangements for entity authentication involving additional secure or trusted devices H04L9/3234) · CPC title

• H04W4/021

  Services related to particular areas, e.g. point of interest [POI] services, venue services or geofences · CPC title

• H04W12/126

  Anti-theft arrangements, e.g. protection against subscriber identity module [SIM] cloning · CPC title