System and method for providing network security to mobile devices

• US 10,621,344 B2
• Filed: 10/17/2019
• Issued: 04/14/2020
• Est. Priority Date: 12/13/2005
• Status: Active Grant

• Current Assignee: CUPP Computing AS
• Original Assignee: CUPP Computing AS
• Inventors: Touboul, Shlomo
• Primary Examiner(s): Okeke, Izunna
• Application Number:
  US16/656,358
• Publication Number:
  US 20200057852A1
• Time in Patent Office: 180 Days
• CPC Class Codes: G06F 21/562 Static detection
• CPC Class Codes: H04L 63/02 for separating internal from external traffic, e.g. firewalls
• CPC Class Codes: H04L 63/0263 Rule management
• CPC Class Codes: H04L 63/1416 Event detection, e.g. attack signature detection
• CPC Class Codes: H04L 63/1441 Countermeasures against malicious traffic countermeasures against attacks on cryptographic mechanisms H04L9/002
• CPC Class Codes: H04L 63/145 the attack involving the propagation of malware through the network, e.g. viruses, trojans or worms
• CPC Class Codes: H04L 63/20 for managing network security; network security policies in general filtering policies H04L63/0227
• CPC Class Codes: H04W 12/00 Security arrangements; Authentication; Protecting privacy or anonymity
• CPC Class Codes: H04W 12/12 Detection or prevention of fraud
• CPC Class Codes: H04W 12/128 Anti-malware arrangements, e.g. protection against SMS fraud or mobile malware

Abstract

A small piece of hardware connects to a mobile device and filters out attacks and malicious code. Using the piece of hardware, a mobile device can be protected by greater security and possibly by the same level of security offered by its associated corporation/enterprise. In one embodiment, a mobile security system includes a connection mechanism for connecting to a data port of a mobile device and for communicating with the mobile device; a network connection module for acting as a gateway to a network; a security policy for determining whether to forward content intended for the mobile device to the mobile device; and a security engine for executing the security policy.

Claims

1. A security system, comprising:

security system memory; and

a security system processor configured to;

store in the security system memory at least a portion of security code, at least a portion of a security policy, and at least a portion of security data,

the at least a portion of the security code, the at least a portion of the security policy, and the at least a portion of the security data configured to provide security services to a mobile device coupled to the security system, the mobile device having at least one mobile device processor different than the security system processor of the security system,

the at least a portion of the security code, the at least a portion of the security policy, and the at least a portion of the security data being managed by one or more information technology (IT) administrators using an IT administrator system on a trusted enterprise network, the at least a portion of the security code, the at least a portion of the security policy, and the at least a portion of the security data being configured based on one or more policies implemented by the one or more IT administrators on the trusted enterprise network, the mobile device being a first computer system, the security system being a second computer system, and the IT administrator system being a third computer system, the first computer system, the second computer system and the third computer system being separate computer systems;

store in the security system memory at least a portion of remote management code configured to process an update command, the update command being an instruction to update at least one of the security code, the security policy, or the security data based on one or more revised policies implemented by the one or more IT administrators on the trusted enterprise network;

receive a particular update command to update a particular one of the security code, the security policy, or the security data, the particular update command having originated from the IT administrator system and having been forwarded to the security system; and

execute the update command using the remote management code to update the particular one of the security code, the security policy, or the security data.

2. The security system of claim 1, wherein the security system is on a separate appliance removably coupled to the mobile device.

3. The security system of claim 1, wherein the security code, the security policy, and the security data provide gateway-level security services.

4. The security system of claim 1, wherein the security code, the security policy, and the security data provide firewall security services.

5. The security system of claim 1, wherein the security code, the security policy, and the security data provide malware protection security services.

6. The security system of claim 1, wherein the security code, the security policy, and the security data provide content-based security services.

7. The security system of claim 1, wherein the IT administrator system includes an update authorities device configured to automatically generate and send update commands.

8. The security system of claim 1, wherein the security code, the security policy, and the security data are configured to mirror security policies of a gateway on the trusted enterprise network.

9. The security system of claim 1, wherein the particular update command includes a command to update configuration parameters of one of the security code, the security policy, or the security data of the security system.

10. A non-transitory computer readable storage device of a security system storing:

program instructions;

at least a portion of security code, at least a portion of a security policy, and at least a portion of security data,

the at least a portion of the security code, the at least a portion of the security policy, and the at least a portion of the security data configured to provide security services to a mobile device coupled to the security system, the mobile device having at least one mobile device processor different than a security system processor of the security system,

the at least a portion of the security code, the at least a portion of the security policy, and the at least a portion of the security data being managed by one or more information technology (IT) administrators using an IT administrator system on a trusted enterprise network, the at least a portion of the security code, the at least a portion of the security policy, and the at least a portion of the security data being configured based on one or more policies implemented by the one or more IT administrators on the trusted enterprise network, the mobile device being a first computer system, the security system being a second computer system, and the IT administrator system being a third computer system, the first computer system, the second computer system and the third computer system being separate computer systems; and

at least a portion of remote management code configured to process an update command, the update command being an instruction to update at least one of the security code, the security policy, or the security data based on one or more revised policies implemented by the one or more IT administrators on the trusted enterprise network;

the program instructions when executed by the security system processor causing the security system to receive a particular update command to update a particular one of the security code, the security policy, or the security data, the particular update command having originated from the IT administrator system, the particular update command having been forwarded to the security system; and

the remote management code when executed by the security system processor causing the system to process the update command to update the particular one of the security code, the security policy, or the security data.

11. The non-transitory computer readable storage device of claim 10, wherein the security system is on a separate appliance removably coupled to the mobile device.

12. The non-transitory computer readable storage device of claim 10, wherein the security code, the security policy, and the security data provide gateway-level security services.

13. The non-transitory computer readable storage device of claim 10, wherein the security code, the security policy, and the security data provide firewall security services.

14. The non-transitory computer readable storage device of claim 10, wherein the security code, the security policy, and the security data provide malware protection security services.

15. The non-transitory computer readable storage device of claim 10, wherein the security code, the security policy, and the security data provide content-based security services.

16. The non-transitory computer readable storage device of claim 10, wherein the IT administrator system includes an update authorities device configured to automatically generate and send update commands.

17. The non-transitory computer readable storage device of claim 10, wherein the security code, the security policy, and the security data are configured to mirror security policies of a gateway on the trusted enterprise network.

18. The non-transitory computer readable storage device of claim 10, wherein the particular update command includes a command to update configuration parameters of one of the security code, the security policy, or the security data of the security system.

19. A security system, comprising:

security system memory; and

a security system processor configured to;

store in the security system memory at least a portion of security code, at least a portion of a security policy, and at least a portion of security data,

the at least a portion of the security code, the at least a portion of the security policy, and the at least a portion of the security data configured to be processed by the security system processor to implement security services for a mobile device coupled to the security system, the mobile device having at least one mobile device processor different than the security system processor of the security system,

the at least a portion of the security code, the at least a portion of the security policy, and the at least a portion of the security data being managed by one or more information technology (IT) administrators using an IT administrator system on a trusted enterprise network, the at least a portion of the security code, the at least a portion of the security policy, and the at least a portion of the security data being configured based on one or more policies implemented by the one or more IT administrators on the trusted enterprise network, the mobile device being a first computer system, the security system being a second computer system, and the IT administrator system being a third computer system, the first computer system, the second computer system and the third computer system being separate computer systems;

store in the security system memory at least a portion of remote management code configured to process an update command, the update command being an instruction to update at least one of the security code, the security policy, or the security data based on one or more revised policies implemented by the one or more IT administrators on the trusted enterprise network;

receive a particular update command to update a particular one of the security code, the security policy, or the security data, the particular update command having originated from the IT administrator system and having been forwarded to the security system; and

execute the update command using the remote management code to update the particular one of the security code, the security policy, or the security data.

20. A non-transitory computer readable storage device of a security system storing:

program instructions;

at least a portion of security code, at least a portion of a security policy, and at least a portion of security data,

the at least a portion of the security code, the at least a portion of the security policy, and the at least a portion of the security data configured to be processed by the security system processor to implement security services for a mobile device coupled to the security system, the mobile device having at least one mobile device processor different than the security system processor of the security system,

the at least a portion of the security code, the at least a portion of the security policy, and the at least a portion of the security data being managed by one or more information technology (IT) administrators using an IT administrator system on a trusted enterprise network, the at least a portion of the security code, the at least a portion of the security policy, and the at least a portion of the security data being configured based on one or more policies implemented by the one or more IT administrators on the trusted enterprise network, the mobile device being a first computer system, the security system being a second computer system, and the IT administrator system being a third computer system, the first computer system, the second computer system and the third computer system being separate computer systems; and

at least a portion of remote management code configured to process an update command, the update command being an instruction to update at least one of the security code, the security policy, or the security data based on one or more revised policies implemented by the one or more IT administrators on the trusted enterprise network;

the program instructions when executed by the security system processor causing the security system to receive a particular update command to update a particular one of the security code, the security policy, or the security data, the particular update command having originated from the IT administrator system, the particular update command having been forwarded to the security system; and

the remote management code when executed by the security system processor causing the system to process the update command to update the particular one of the security code, the security policy, or the security data.