SECURE MOBILE PLATFORM SYSTEM

• US 20100100939A1
• Filed: 10/21/2008
• Published: 04/22/2010
• Est. Priority Date: 10/21/2008
• Status: Active Grant

• Current Assignee: Lookout Incorporated
• Original Assignee: Flexilis Incorporated (Lookout Incorporated)
• Inventors: MAHAFFEY, Kevin, Hering, John G., Burgess, James
• Granted Patent: US 8,087,067 B2
• Time in Patent Office: Days
• US Class Current: 726/4
• CPC Class Codes: G06F 21/30 Authentication, i.e. establishing the identity or authorisation of security principals
• CPC Class Codes: G06F 21/31 User authentication
• CPC Class Codes: G06F 21/577 Assessing vulnerabilities and evaluating computer system security
• CPC Class Codes: G06F 2221/2129 Authenticate client device independently of the user
• CPC Class Codes: H04L 2463/102 applying security measure for e-commerce data processing systems or methods, specially adapted for e-commerce G06Q30/00
• CPC Class Codes: H04L 63/10 for controlling access to devices or network resources
• CPC Class Codes: H04L 63/102 Entity profiles
• CPC Class Codes: H04L 63/1416 Event detection, e.g. attack signature detection
• CPC Class Codes: H04W 12/08 Access security

Abstract

The present invention is directed toward a secure platform which enables mobile devices, such as a cell phones, smartphones, or PDAs, to have relationships with services or service providers that are controlled by the state of security on each device. In an embodiment, the platform is comprised of a server that receives data from security software on a mobile device regarding the device'"'"'s security state. The platform enables access to a service to be granted, denied, or limited based on the security state of the mobile device. The platform may provide two-way communications between a mobile device and a service so that the platform can enforce access security both from the client to the service and from the service to the client. Furthermore, the platform allows services or service providers to evaluate the security state of a device independently of using the platform to communicate with the device.

Claims

6. A method comprising:

providing a server in communication with a mobile communications device;

at the server, receiving a request for access to the mobile communications device;

at the server, assessing the security state of the mobile communications device; and

granting access to the mobile communications device depending upon the security state of the device.

1. A system comprising:

a server for verifying the security state of a mobile communications device, the server having a remote security component in communication with the mobile communications device;

the server receiving from the mobile communications device raw or partially processed data about events that occurred on the mobile communications device;

the remote security component processing the received data to assess a security state of the mobile communications device; and

the server granting limited or complete access to the mobile communications device depending on the security state of the mobile communications device.

2. The system of claim 1, wherein the remote security component communicates with a database containing mobile communications device security event information and compares the received data to the database to assess the security state of the mobile communications device.

3. The system of claim 1, wherein the server receives a request to access the mobile communications device from a service provider.

4. The system of claim 1, wherein the server grants access to the mobile communications device from a service provider.

5. The system of claim 1, wherein the remote security component assesses security events on the mobile communications device to determine severity levels for the security events.

7. The method of claim 6, wherein the request for access is from a service provider.

8. The method of claim 6, wherein the step of assessing the security state of the mobile communications device further comprises:

at the server, providing a remote security component and providing a database containing mobile communications device security event information;

at the remote security component, receiving raw or partially processed data about events on the mobile communications device; and

at the server, processing the data received by the remote security component to assess a security state of the mobile communications device.

8-1. The method of claim 7, wherein the processing step further includes, at the server, processing the data received by the remote security component to assess a severity of the security events on the mobile communications device to determine severity levels for the security events.

9. A method comprising:

providing a mobile communications device;

at the mobile communications device, receiving a request for access to the mobile communications device;

at the mobile communications device, assessing the security state of the mobile communications device; and

granting access to the mobile communications device depending upon the security state of the device.

10. The method of claim 9, wherein the request for access is from a service provider.

11. The method of claim 9, wherein the step of assessing the security state of the mobile communications device further comprises:

providing a local security component on the mobile communications device;

at the local security component on the mobile communications device, receiving raw or partially processed data about events that occurred on the mobile communications device; and

at the local security component on the mobile communications device, processing the data received by the local security component to assess a security state of the mobile device.

12. The method of claim 11, wherein the processing step further includes, at the mobile communications device, processing the data received by the local security component to assess a severity of security events on the mobile communications device to determine severity levels for the security events.

13. A computer readable medium containing computer readable instructions comprising:

computer program code for receiving a request for access to a mobile communications device;

computer program code for assessing the security state of the mobile communications device; and

computer program code for granting access to the mobile communications device depending upon the security state of the device.

14. The computer readable medium of claim 13, wherein assessing the security state of the mobile communications device further comprises:

computer program code for providing a remote security component on a server in communication with a mobile communications device and a database containing mobile communications device security event information;

computer program code for receiving at the remote security component raw or partially processed data about events on the mobile communications device; and

computer program code for processing the received data by the remote security component to assess a security state of the mobile device.

15. The computer readable medium of claim 13, wherein assessing the security state of the mobile communications device further comprises:

computer program code for providing a local security component on the mobile communications device;

computer program code for receiving at the local security component raw or partially processed data about events that occurred on the mobile communications device; and

computer program code for processing the received data by the local security component to assess a security state of the mobile device.

16. A system comprising:

a server for verifying the security state of a mobile communications device, the server having a remote security component in communication with the mobile communications device;

the server receiving from the mobile communications device raw or partially processed data about events that occurred on the mobile communications device;

the remote security component processing the received data to assess a security state of the mobile communications device; and

the server granting limited or complete access to a service provider depending on the security state of the mobile communications device.

17. The system of claim 16, wherein the remote security component communicates with a database containing mobile communications device security event information and compares the received data to the database to assess the security state of the mobile communications device.

18. The system of claim 16, wherein the server receives a request to access the service provider from the mobile communications device.

19. The system of claim 16, wherein the remote security component assesses security events on the mobile communications device to determine severity levels for the security events.

20. A method comprising:

providing a server in communication with a mobile communications device and a service provider;

at the server, receiving a request for access to the service provider from the mobile communications device;

at the server, assessing the security state of the mobile communications device; and

granting access to the service provider depending upon the security state of the mobile communications device.

21. The method of claim 20, wherein the step of assessing the security state of the mobile communications device further comprises:

at the server, providing a remote security component and providing a database containing mobile communications device security event information;

at the remote security component, receiving raw or partially processed data about events on the mobile communications device; and

at the server, processing the data received by the remote security component to assess a security state of the mobile communications device.

22. The method of claim 21, wherein the processing step further includes, at the server, processing the data received by the remote security component to assess a severity of the security events on the mobile communications device to determine severity levels for the security events.

23. A method comprising:

providing a server in communication with a mobile communications device and a service provider;

at the server, receiving a request from the service provider for the security state of the mobile communications device;

at the server, assessing the security state of the mobile communications device; and

providing the security state of the mobile communications device to the service provider.

24. The method of claim 23, wherein the step of assessing the security state of the mobile communications device further comprises:

at the server, providing a remote security component and providing a database containing mobile communications device security event information;

at the remote security component, receiving raw or partially processed data about events on the mobile communications device; and

at the server, processing the data received by the remote security component to assess a security state of the mobile communications device.

25. The method of claim 24, wherein the processing step further includes, at the server, processing the data received by the remote security component to assess a severity of the security events on the mobile communications device to determine severity levels for the security events.

26. The method of claim 23, wherein the request for the mobile communications device'"'"'s security state is received by a web API with access to the server.