AUTOMATIC SECURITY ACTION INVOCATION FOR MOBILE COMMUNICATIONS DEVICE

• US 20080009264A1
• Filed: 05/18/2007
• Published: 01/10/2008
• Est. Priority Date: 05/18/2006
• Status: Active Grant

• Current Assignee: Blackberry Limited
• Original Assignee: Research In Motion Limited (Blackberry Limited)
• Inventors: Fyke, Steven, Adams, Neil, Little, Herbert, Brown, Michael
• Granted Patent: US 9,077,485 B2
• Time in Patent Office: Days
• US Class Current: 455/410
• CPC Class Codes: G06F 21/305 by remotely controlling device operation
• CPC Class Codes: G06F 21/6218 to a system of files or objects, e.g. local or distributed file system or database
• CPC Class Codes: G06F 21/88 Detecting or preventing theft or loss
• CPC Class Codes: G06F 2221/2143 Clearing memory, e.g. to prevent the data from being stolen
• CPC Class Codes: H04L 2209/80 Wireless
• CPC Class Codes: H04L 63/102 Entity profiles
• CPC Class Codes: H04L 9/00 Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols
• CPC Class Codes: H04W 12/02 Protecting privacy or anonymity, e.g. protecting personally identifiable information [PII]
• CPC Class Codes: H04W 12/08 Access security
• CPC Class Codes: H04W 12/082 using revocation of authorisation
• CPC Class Codes: H04W 12/12 Detection or prevention of fraud
• CPC Class Codes: H04W 12/61 Time-dependent
• CPC Class Codes: H04W 8/02 Processing of mobility data, e.g. registration information at HLR [Home Location Register] or VLR [Visitor Location Register]; Transfer of mobility data, e.g. between HLR, VLR or external networks
• CPC Class Codes: H04W 8/245 from a network towards a terminal

Abstract

A mobile communications device, method, and computer program product for providing security on a mobile communications device are described. In accordance with one example embodiment, the mobile communications device comprises: a processor; a communications subsystem connected to the processor operable to exchange signals with a wireless network and with the processor; a storage element connected to the processor and having a plurality of application modules and data stored thereon, the data comprising at least user application data associated with the application modules and service data including data for establishing communications with the wireless network; and a security module operable to determine if a battery level falls below a predetermined threshold and perform a security action comprising erasing or encrypting at least some of the data on the storage element if the battery power falls below the predetermined threshold.

Claims

1. A mobile communications device, comprising:

a processor;

a communications subsystem connected to the processor operable to exchange signals with a wireless network and with the processor;

a storage element connected to the processor and having a plurality of application modules and data stored thereon, the data comprising at least user application data associated with the application modules and service data including data for establishing communications with the wireless network; and

a security module operable to determine if a battery level falls below a predetermined threshold and perform a security action comprising erasing or encrypting at least some of the data on the storage element if the battery power falls below the predetermined threshold.

2. The mobile communications device of claim 1, wherein the predetermined threshold is a level at which the mobile communications device will the operability of the communications subsystem to exchange signals with the wireless network.

3. The mobile communications device of claim 1, wherein the predetermined threshold is a level below which the mobile communications device does not have enough power to perform the security action.

4. The mobile communications device of claim 1, wherein one of the policy messages comprises an instruction to enable or disable the operability to determine if the battery level falls below the predetermined threshold and to perform the security action if the battery level falls below the predetermined threshold.

5. The mobile communications device of claim 1, wherein the security action comprises erasing at least some of the data on the storage element and overwriting the portions of the storage element where the erased data was located.

6. The mobile communications device of claim 1, wherein the security action comprises erasing substantially all of the user application data from the storage element.

7. The mobile communications device of claim 1, wherein the security action comprises erasing substantially all of the service data from the storage element.

8. The mobile communications device of claim 1, wherein the security action comprises encrypting at least some of the data on the storage element.

9. The mobile communications device of claim 1, wherein the security action comprises encrypting substantially all of the user application data from the storage element.

10. The mobile communications device of claim 1, wherein the security action comprises encrypting substantially all of the service data from the storage element.

11. The mobile communications device of claim 1, wherein the service data further includes data required to establish communications through a wireless gateway connected to the wireless network.

12. The mobile communications device of claim 1, wherein the security module is configurable by the user to erase or encrypt the data on the storage element, or selectively erase and encrypt portions of the data on the storage element.

13. A method for providing security on a mobile communications device, the mobile communications device being configured to communicate with a wireless communications network and including a storage element having data stored thereon, the method comprising the acts of:

monitoring to determine if a battery level falls below a predetermined threshold; and

if the battery power falls below the predetermined threshold, performing a security action comprising erasing or encrypting at least some of the data on the storage element.

14. The method of claim 13, wherein the predetermined threshold is a level at which the mobile communications device will the operability of the communications subsystem to exchange signals with the wireless network.

15. The method of claim 13, wherein the predetermined threshold is a level below which the mobile communications device does not have enough power to perform the security action.

16. The method of claim 13, wherein the monitoring to determine if a battery level falls below a predetermined threshold and performing the security action if the battery power falls below the predetermined threshold is enabled and disabled by respective policy messages received on the mobile communications device.

17. The method of claim 13, wherein the security action comprises erasing at least some of the data on the storage element and overwriting the portions of the storage element where the erased data was located.

18. The method of claim 13, wherein the security action comprises erasing substantially all of the user application data from the storage element.

19. The method of claim 13, wherein the security action comprises erasing substantially all of the service data from the storage element.

20. The method of claim 13, wherein the security action comprises encrypting at least some of the data on the storage element.

21. The method of claim 13, wherein the security action comprises encrypting substantially all of the user application data from the storage element.

22. The method of claim 13, wherein the security action comprises encrypting substantially all of the service data from the storage element.

23. The method of claim 13, wherein the service data further includes data required to establish communications through a wireless gateway connected to the wireless network.

24. The method of claim 13, wherein the security action is configurable by the user to erase or encrypt the data on the storage element, or selectively erase and encrypt portions of the data on the storage element.

25. A computer program product comprising a machine-readable medium tangibly embodying instructions executable on a mobile communications device for providing security on the mobile communications device, the machine-readable instructions comprising:

code for monitoring to determine if a battery level falls below a predetermined threshold; and

code for performing a security action comprising erasing or encrypting at least some of the data on the storage element if the battery power falls below the predetermined threshold.