Systems and methods for providing security services during power management mode

• US 10,404,722 B2
• Filed: 06/28/2018
• Issued: 09/03/2019
• Est. Priority Date: 08/04/2008
• Status: Active Grant

• Current Assignee: CUPP Computing AS
• Original Assignee: CUPP Computing AS
• Inventors: Oz, Ami, Touboul, Shlomo
• Primary Examiner(s): Zhao, Don G
• Application Number:
  US16/022,127
• Publication Number:
  US 20180324192A1
• Time in Patent Office: 432 Days
• CPC Class Codes: G06F 1/3209 Monitoring remote activity, e.g. over telephone lines or network connections
• CPC Class Codes: G06F 21/56 Computer malware detection or handling, e.g. anti-virus arrangements
• CPC Class Codes: G06F 21/57 Certifying or maintaining trusted computer platforms, e.g. secure boots or power-downs, version controls, system software checks, secure updates or assessing vulnerabilities
• CPC Class Codes: G06F 2221/034 Test or assess a computer or a system
• CPC Class Codes: G06F 8/62 Uninstallation
• CPC Class Codes: H04L 63/0227 Filtering policies mail message filtering H04L51/212
• CPC Class Codes: H04L 63/0245 Filtering by information in the payload
• CPC Class Codes: H04L 63/14 for detecting or protecting against malicious traffic
• CPC Class Codes: H04L 63/1408 by monitoring network traffic monitoring network traffic per se H04L43/00
• CPC Class Codes: H04L 63/1425 Traffic logging, e.g. anomaly detection
• CPC Class Codes: H04L 63/20 for managing network security; network security policies in general filtering policies H04L63/0227
• CPC Class Codes: H04W 12/06 Authentication
• CPC Class Codes: H04W 12/062 Pre-authentication
• CPC Class Codes: Y02D 30/70 in wireless communication networks

Abstract

Systems and methods for providing security services during a power management mode are disclosed. In some embodiments, a method comprises detecting with a mobile security system a wake event on a mobile device, providing from the mobile security system a wake signal, the providing being in response to the wake event to wake a mobile device from a power management mode, and managing with the mobile security system security services of the mobile device. Managing security services may comprise scanning a hard drive of the mobile devices for viruses and/or other malware. Managing security services may also comprise updating security applications or scanning the mobile device for unauthorized data.

Claims

1. A method comprising:

storing security instructions by a security system, the security system having at least one security system processor;

storing, by the security system, one or more trigger conditions associated with waking a mobile device from a power management mode, the mobile device having at least one mobile device processor, the at least one mobile device processor being different than the at least one security system processor;

monitoring, using the at least one security system processor, the one or more trigger conditions associated with waking the mobile device from the power management mode, each of the one or more trigger conditions being satisfied based on an occurrence of one or more wake events;

detecting, using the at least one security system processor, one or more particular wake events, the one or more particular wake events satisfying a particular trigger condition of the one or more trigger conditions;

generating, using the at least one security system processor, a wake signal in response to the satisfaction of the particular trigger condition, the wake signal configured to cause the mobile device to wake from the power management mode;

transmitting, using the at least one security system processor, the wake signal to the mobile device, thereby causing the mobile device to wake from the power management mode; and

executing, using the at least one security system processor, the security instructions after waking the mobile device from the power management mode, the executing the security instructions causing security services to be executed on the mobile device.

2. The method of claim 1, wherein the security services comprise scanning a hard drive of the mobile device for malware.

3. The method of claim 1, wherein the security services comprise updating security applications of the mobile device.

4. The method of claim 1, wherein the security services comprise updating security data used by security applications of the mobile device.

5. The method of claim 1, wherein the security services comprise updating an operating system of the mobile device.

6. The method of claim 1, wherein the security services comprise scanning the mobile device for unauthorized data.

7. The method of claim 6, wherein scanning the mobile device for unauthorized data comprises scanning the mobile device for unauthorized data based on a security policy.

8. The method of claim 6, wherein the unauthorized data includes applications that a user did not authorize to be on the mobile device.

9. The method of claim 6, wherein the unauthorized data includes files to which a user or the mobile device should not have access.

10. The method of claim 6, wherein the unauthorized data includes music files to which a user or the mobile device should not have access.

11. The method of claim 1, wherein the security services comprise scanning for adult content.

12. The method of claim 1, wherein the security services comprise scanning peripherals attached to the mobile device for malware.

13. The method of claim 1, wherein the security services comprise performing system maintenance.

14. The method of claim 13, wherein the performing system maintenance includes scanning a system registry for errors.

15. The method of claim 13, wherein the performing system maintenance includes evaluating system performance.

16. The method of claim 1, wherein the security services comprise taking corrective action to address infected or unauthorized content.

17. The method of claim 16, wherein the taking of corrective action includes cleaning the infected or unauthorized content.

18. The method of claim 16, wherein the taking of corrective action includes quarantining the infected or unauthorized content.

19. The method of claim 16, wherein the taking of corrective action includes deleting the infected or unauthorized content.

20. The method of claim 1, wherein the security services comprise generating a report about infected or unauthorized content located and corrective actions taken.

21. The method of claim 1, wherein the security services comprise re-imaging the mobile device.

22. The method of claim 1, wherein the one or more wake events comprise an expiration of a predetermined period of time.

23. The method of claim 1, wherein the one or more wake events comprise a specific time of day.

24. The method of claim 1, wherein the one or more wake events comprise a particular date and time.

25. The method of claim 1, wherein the one or more wake events comprise a recurring date or time.

26. The method of claim 1, wherein the one or more wake events comprise receiving data over a network.

27. The method of claim 1, wherein the one or more wake events comprise receiving an alarm condition from a security administrator.

28. The method of claim 1, wherein the one or more wake events can be set by a security administrator.

29. The method of claim 1, wherein the one or more trigger conditions include a first trigger condition associated with at least one first security service of the security services, and include a second trigger condition associated with at least one second security service of the security services.

30. The method of claim 1, further comprising sending a power conservation signal upon completion of the security services.

31. The method of claim 1, wherein waking the mobile device comprises waking only one or more specific components of the mobile device from power management mode without waking other components of the mobile device from power management mode.

32. The method of claim 31, wherein one of the other components of the mobile device that is not woken from power management mode is a display of the mobile device.

33. The method of claim 1, further comprising encrypting the wake signal before transmitting the wake signal.

34. A security system, comprising:

at least one security system processor;

a first security system store storing security instructions;

a second security system store storing one or more trigger conditions associated with waking a mobile device from a power management mode, the mobile device having at least one mobile device processor, the at least one mobile device processor being different than the at least one security system processor;

a connection mechanism configured to communicate with the mobile device;

code configured to be executed by the at least one security processor to perform;

monitoring the one or more trigger conditions associated with waking the mobile device from the power management mode, each of the one or more trigger conditions being satisfied based on an occurrence of one or more wake events;

detecting one or more particular wake events, the one or more particular wake events satisfying a particular trigger condition of the one or more trigger conditions;

generating a wake signal in response to the satisfaction of the particular trigger condition, the wake signal configured to cause the mobile device to wake from the power management mode;

transmitting the wake signal to the mobile device, thereby causing the mobile device to wake from the power management mode; and

executing the security instructions after waking the mobile device from the power management mode, the executing the security instructions causing security services to be executed on the mobile device.

35. The system of claim 34, wherein the security services comprise scanning a hard drive of the mobile device for malware.

36. The system of claim 34, wherein the security services comprise updating security applications of the mobile device.

37. The system of claim 34, wherein the security services comprise updating security data used by security applications of the mobile device.

38. The system of claim 34, wherein the security services comprise updating an operating system of the mobile device.

39. The system of claim 34, wherein the security services comprise scanning the mobile device for unauthorized data.

40. The system of claim 39, wherein scanning the mobile device for unauthorized data comprises scanning the mobile device for unauthorized data based on a security policy.

41. The system of claim 39, wherein the unauthorized data includes applications that a user did not authorize to be on the mobile device.

42. The system of claim 39, wherein the unauthorized data includes files to which a user or the mobile device should not have access.

43. The method of claim 39, wherein the unauthorized data includes music files to which a user or the mobile device should not have access.

44. The system of claim 34, wherein the security services comprise scanning for adult content.

45. The system of claim 34, wherein the security services comprise scanning peripherals attached to the mobile device for malware.

46. The system of claim 34, wherein the security services comprise performing system maintenance.

47. The system of claim 46, wherein the performing system maintenance includes scanning a system registry for errors.

48. The system of claim 46, wherein the performing system maintenance includes evaluating system performance.

49. The system of claim 34, wherein the security services comprise taking corrective action to address infected or unauthorized content.

50. The system of claim 49, wherein the taking of corrective action includes cleaning the infected or unauthorized content.

51. The system of claim 49, wherein the taking of corrective action includes quarantining the infected or unauthorized content.

52. The system of claim 49, wherein the taking of corrective action includes deleting the infected or unauthorized content.

53. The system of claim 34, wherein the security services comprise generating a report about infected or unauthorized content located and corrective actions taken.

54. The system of claim 34, wherein the security services comprise re-imaging the mobile device.

55. The system of claim 34, wherein the one or more wake events comprise an expiration of a predetermined period of time.

56. The system of claim 34, wherein the one or more wake events comprise a specific time of day.

57. The system of claim 34, wherein the one or more wake events comprise a particular date and time.

58. The system of claim 34, wherein the one or more wake events comprise a recurring date or time.

59. The system of claim 34, wherein the one or more wake events comprise receiving data over a network.

60. The system of claim 34, wherein the one or more wake events comprise receiving an alarm condition from a security administrator.

61. The system of claim 34, wherein the one or more wake events can be set by a security administrator.

62. The system of claim 34, wherein the one or more trigger conditions include a first trigger condition associated with at least one first security service of the security services, and include a second trigger condition associated with at least one second security service of the security services.

63. The system of claim 34, further comprising code to be executed by the at least one security processor to perform sending a power conservation signal upon completion of the security services.

64. The system of claim 34, wherein waking the mobile device comprises waking only one or more specific components of the mobile device from power management mode without waking other components of the mobile device from power management mode.

65. The system of claim 64, wherein one of the other components of the mobile device that is not woken from power management mode is a display of the mobile device.

66. The system of claim 34, further comprising code to be executed by the at least one security processor to perform encrypting the wake signal before transmitting the wake signal.

67. A non-transitory computer readable medium storing executable code, the code executable by a processor for performing a method, the method comprising:

storing security instructions by a security system, the security system having at least one security system processor;

storing, by the security system, one or more trigger conditions associated with waking a mobile device from a power management mode, the mobile device having at least one mobile device processor, the at least one mobile device processor being different than the at least one security system processor;

monitoring, using the at least one security system processor, the one or more trigger conditions associated with waking the mobile device from the power management mode, each of the one or more trigger conditions being satisfied based on an occurrence of one or more wake events;

detecting, using the at least one security system processor, one or more particular wake events, the one or more particular wake events satisfying a particular trigger condition of the one or more trigger conditions;

generating, using the at least one security system processor, a wake signal in response to the satisfaction of the particular trigger condition, the wake signal configured to cause the mobile device to wake from the power management mode;

transmitting, using the at least one security system processor, the wake signal to the mobile device, thereby causing the mobile device to wake from the power management mode; and

executing, using the at least one security system processor, the security instructions after waking the mobile device from the power management mode, the executing the security instructions causing security services to be executed on the mobile device.