Security for mobile communications device

• US 20050020315A1
• Filed: 07/21/2004
• Published: 01/27/2005
• Est. Priority Date: 07/22/2003
• Status: Active Grant

• Current Assignee: Huawei Technologies Co., Ltd. (Huawei Investment & Holding Co., Ltd.)
• Original Assignee: Blackberry Limited
• Inventors: Robertson, Ian M.
• Granted Patent: US 8,620,266 B2
• Time in Patent Office: Days
• US Class Current: 455/565
• CPC Class Codes: G06F 21/60 Protecting data
• CPC Class Codes: H04L 63/083 using passwords cryptographic mechanisms or cryptographic arrangements for entity authentication using a predetermined code H04L9/3226
• CPC Class Codes: H04M 1/673 the user being required to key in a code
• CPC Class Codes: H04M 1/724 User interfaces specially adapted for cordless or mobile telephones
• CPC Class Codes: H04W 12/02 Protecting privacy or anonymity, e.g. protecting personally identifiable information [PII]
• CPC Class Codes: H04W 12/06 Authentication
• CPC Class Codes: H04W 12/12 Detection or prevention of fraud
• CPC Class Codes: H04W 12/126 Anti-theft arrangements, e.g. protection against subscriber identity module [SIM] cloning
• CPC Class Codes: H04W 88/02 Terminal devices

Abstract

A mobile communications device for communicating with a wireless network, including an electronic storage having data stored thereon, a processor connected to the storage for accessing the data, a communications sub-system connected to the processor for exchanging signals with the wireless network and with the processor, a user input interface connected to send user input signals to the processor in response to user action, and a security module associated with the processor for detecting a trigger condition and automatically taking a security action if a bypass user action is not detected after detection of the trigger condition.

Claims

1. A mobile communications device for communicating with a wireless network, comprising:

an electronic storage having data stored thereon;

a processor connected to the storage for accessing the data;

a communications sub-system connected to the processor for exchanging signals with the wireless network and with the processor;

a user input interface connected to send user input signals to the processor in response to user action; and

a security module associated with the processor for detecting a trigger condition and automatically taking a security action if a user bypass action is not detected through the user input interface after detection of the trigger condition.

2. The mobile communications device of claim 1 wherein the security action includes erasing all or selected data from the storage to protect the data.

3. The mobile communications device of claim 1 wherein the security action includes encrypting all or selected data from the storage to protect the data.

4. The mobile communications device of claim 1 wherein the data includes service data required by the mobile device to successfully communicate over the wireless network and the security action includes erasing the service data from the storage.

5. The mobile communications device of claim 1 wherein the security action includes disabling an ability of the device to communicate with the wireless network.

6. The mobile device of claim 1 wherein the trigger condition includes a variance from a predetermined threshold in a communications characteristic between the device and the wireless network.

7. The mobile device of claim 6 wherein the communications characteristic includes a messaging traffic pattern between the device and the wireless network.

8. The mobile communications device of claim 1 wherein the trigger condition includes a lack of communication by the device with the wireless network for a predetermined duration of time.

9. The mobile communications device of claim 1 wherein the trigger condition includes a variance in the use of the user input interface from a predetermined threshold.

10. The mobile communications device of claim 9 wherein the user input interface includes a keyboard or keypad and the trigger condition includes inactivity of the user input interface for a predetermined duration.

11. The mobile communications device of claim 1 wherein the security module takes the security action if the user bypass action is not detected within a predetermined duration after the detection of the trigger condition.

12. The mobile communications device of claim 11 wherein the security module takes the security action if the user bypass action is not detected within a predetermined number of attempts by the user to take the user bypass action.

13. The mobile communications device of claim 1 wherein the user bypass action includes entry of a secret shared by the device and the user through the user input interface.

14. The mobile communications device of claim 1 wherein the device includes a user output device for issuing a prompt for action to the user, the security module causing the prompt to be issued upon detection of the trigger condition.

15. A method of providing security for a mobile communication device that is configured to communicate over a wireless communications network, including steps of:

(a) monitoring for a trigger condition;

(b) subsequent to occurrence of the trigger condition, monitoring for a predetermined user bypass action at the mobile communication device; and

(c) upon failure to detect the predetermined user bypass action within a predetermined time duration after occurrence of the trigger condition, automatically taking security action to protect data stored on the mobile communication device.

16. The method of claim 15 wherein the data stored on the mobile communication device includes service data required by the mobile communication device to communicate over the wireless communications network, the security action including permanently erasing the service data stored on the mobile communication device.

17. The method of claim 15 wherein the security action includes encrypting at least some of the data stored on the mobile communication device.

18. The method of claim 15 wherein the trigger condition includes a lack of communications between the communication device and the wireless communications network for a predetermined duration.

19. The method of claim 15 including a step of prompting the user to take action upon occurrence of the trigger condition.

20. The method of claim 15 including monitoring a number of user bypass action attempts and in step (c) also taking the security action if the user bypass action is not successfully taken within a predetermined number of attempts.

21. The method of claim 15 wherein at least some communications functions of the device are suspended during the predetermined time duration.

22. A computer program product including a computer readable medium carrying computer program code means for providing security for a mobile communication device that is configured to communicate over a wireless communications network, the computer program code means including means for:

(a) monitoring for a trigger condition;

(b) subsequent to occurrence of the trigger condition, monitoring for a user bypass action at the mobile communication device; and

(b) upon failure to detect the user bypass action within a predetermined time duration after occurrence of the trigger condition, automatically taking security action to protect data stored on the mobile communication device.

23. The product of claim 22 wherein the computer readable medium is selected from a physical medium and a transmitted signal.