DEVICE SECURITY

• US 20110055891A1
• Filed: 08/26/2009
• Published: 03/03/2011
• Est. Priority Date: 08/26/2009
• Status: Abandoned Application

• Current Assignee: AT&T Intellectual Property I LP (AT&T, Inc.)
• Original Assignee: AT&T Intellectual Property I LP (AT&T, Inc.)
• Inventors: Rice, Christopher T.
• Application Number:
  US12/548,378
• Publication Number:
  US 20110055891A1
• Time in Patent Office: Days
• US Class Current: 726/2
• CPC Class Codes: G06F 21/31 User authentication
• CPC Class Codes: G06F 21/32 using biometric data, e.g. fingerprints, iris scans or voiceprints
• CPC Class Codes: G06F 21/6218 to a system of files or objects, e.g. local or distributed file system or database
• CPC Class Codes: G06F 21/88 Detecting or preventing theft or loss
• CPC Class Codes: G06F 2221/2111 Location-sensitive, e.g. geographical location, GPS
• CPC Class Codes: G06F 2221/2139 Recurrent verification
• CPC Class Codes: G06F 2221/2143 Clearing memory, e.g. to prevent the data from being stolen
• CPC Class Codes: H04L 63/20 for managing network security; network security policies in general filtering policies H04L63/0227

Abstract

Security of a device, such as a mobile device, is maintained via a heartbeat signal. As long as the heartbeat signal is detected, the device is allowed to perform operations. If the heartbeat signal is not detected, appropriate action is taken. Appropriate action can include powering down the device, restricting access to files, erasing files, erasing the contents of a disk on the device, preventing access to designated files, reporting the location of the device, and/or preventing the device from being turned on after it is turned off. In an example configuration, the heartbeat signal is a low-power consuming, low data rate, signal allowing for processing of the heartbeat signal to be accomplished, at least in part, via the SIM of the device.

Claims

1. A method for maintaining security of a device, the method comprising:

monitoring for a heartbeat signal via the device;

if the heartbeat signal is detected, allowing operation of the device; and

if the heartbeat signal is not detected within a predetermined amount of time, determining an appropriate action to take, taking an appropriate action comprising at least one of;

requesting authorization to allow operation of the device;

or

disabling at least one function of the device; and

if the appropriate action comprises requesting authorization to allow operation of the device;

allowing operation of the device upon, if authorization is received responsive to the request;

or

disabling the at least one function of the device, if authorization is not received responsive to the request.

2. The method in accordance with claim 1, wherein the authorization comprises biometric information.

3. The method in accordance with claim 1, wherein the device is a mobile device.

4. The method in accordance with claim 1, wherein the heartbeat signal is a telemetry signal between the device and a network.

5. The method in accordance with claim 1, wherein disabling at least one function comprises instructing the device to disallow restart after the device is turned off.

6. The method in accordance with claim 1, wherein disabling the at least one function comprises preventing access to at least one of:

a designated file of the device;

a designated application of the device;

a designated portion of the device;

or

a designated peripheral of the device.

7. The method in accordance with claim 1, wherein disabling the at least one function comprises turning the device off.

8. The method in accordance with claim 1, wherein disabling the at least one function comprises erasing at least one of:

a designated file of the device;

designated memory of the device;

or

designated memory of a designated peripheral of the device.

9. The method in accordance with claim 1, wherein disabling at least one function comprises encrypting at least one of a file, a document, or an application.

10. The method in accordance with claim 1, wherein appropriate action is taken when the device is not located in a designated geographic region.

11. A device comprising:

a processing portion configured to;

detect a heartbeat signal;

if the heartbeat signal is detected, allow operation of the device; and

if the heartbeat signal is not detected within a predetermined amount of time, determine an appropriate action to take, taking an appropriate action comprising at least one of;

requesting authorization to allow operation of the device;

or

disabling at least one function of the device.

12. The device in accordance with claim 11, wherein the processor portion request authorization to allow operation of the device, the processor portion further configured to:

if authorization is received responsive to the request, allow operation of the device upon; and

if authorization is not received responsive to the request, disable at least one function of the device.

13. The device in accordance with claim 12, wherein the authorization comprises biometric information.

14. The device in accordance with claim 11, wherein the device is a mobile device.

15. The device in accordance with claim 11, wherein the heartbeat signal is a telemetry signal between the device and a network.

16. The device in accordance with claim 11, wherein disabling at least one function comprises instructing the device to disallow restart after the device is turned off.

17. The device in accordance with claim 11, wherein disabling the at least one function comprises preventing access to at least one of:

a designated file of the device;

a designated application of the device;

a designated portion of the device;

or

a designated peripheral of the device.

18. The device in accordance with claim 11, wherein disabling the at least one function comprises turning the device off.

19. The device in accordance with claim 11, wherein disabling the at least one function comprises erasing at least one of:

a designated file of the device;

designated memory of the device;

or

designated memory of a designated peripheral of the device.

20. The device in accordance with claim 11, wherein disabling at least one function comprises encrypting at least one of a file, a document, or an application.

21. The device in accordance with claim 11, wherein appropriate action is taken when the device is not located in a designated geographic region.