PROTECTING MOBILE DEVICES USING DATA AND DEVICE CONTROL

• US 20110113242A1
• Filed: 06/09/2010
• Published: 05/12/2011
• Est. Priority Date: 06/09/2009
• Status: Abandoned Application

• Current Assignee: Beyond Encryption Limited
• Original Assignee: Beyond Encryption Limited
• Inventors: McCormack, Stephen
• Application Number:
  US12/797,367
• Publication Number:
  US 20110113242A1
• Time in Patent Office: Days
• US Class Current: 713/165
• CPC Class Codes: G06F 21/6218 to a system of files or objects, e.g. local or distributed file system or database
• CPC Class Codes: G06F 2221/2147 Locking files

Abstract

A method for securing data on a mobile device includes establishing a remote connection between a server and a mobile device, receiving at the server a directory listing from the mobile device indicating files and folders stored on the mobile device, selecting one or more files or folders for securing on the mobile device, and transmitting from the server a secure command to the mobile device instructing the mobile device to secure the selected one or more files or folders. A system including a server and a mobile device can perform the method.

Claims

1. A method for securing data on a mobile device, comprising:

establishing a remote connection between a server and a mobile device;

receiving at the server a directory listing from the mobile device indicating files and folders stored on the mobile device;

selecting one or more files or folders for securing on the mobile device; and

transmitting from the server a secure command to the mobile device instructing the mobile device to secure the selected one or more files or folders.

2. The method of claim 1, wherein the secure command comprises a quarantine command instructing the mobile device to secure the selected one or more files or folders by encrypting them.

3. The method of claim 2, wherein the quarantine command instructs the mobile device to encrypt the one or more folders or files by using an Advanced Encryption Standard algorithm.

4. The method of claim 2, further comprising transmitting from the server to the mobile device an un-secure command comprising an un-quarantine command instructing the mobile device to decrypt one or more of the selected one or more files or folders.

5. The method of claim 1, wherein the secure command comprises a delete command instructing the mobile device to secure the selected one or more files or folders by deleting them.

6. The method of claim 5, wherein the delete command instructs the mobile device to delete the selected one or more files or folders by overwriting the selected one or more files or folders at least one time with at least one of patterned data and randomized data.

7. The method of claim 6, wherein the delete command complies with the U.S. Department of Defense clearing and sanitizing standard.

8. The method of claim 5, wherein the delete command further instructs the mobile device to delete a system file that temporarily stores file information.

9. The method of claim 8, wherein the system file comprises a virtual page file or a temporary memory image file.

10. The method of claim 1, wherein the secure command comprises a transfer command instructing the mobile device to secure the selected one or more files or folders by transferring them to the server.

11. The method of claim 10, wherein the transfer command further instructs the mobile device to encrypt and compress the selected one or more files or folders before transferring them to the server.

12. The method of claim 1, further comprising selecting a time limit, wherein the secure command instructs the mobile device to secure the selected one or more files or folders after expiration of the selected time limit.

13. The method of claim 1, further comprising selecting a time limit, wherein the secure command instructs the mobile device to secure the selected one or more files or folders if the mobile device remains unconnected from the server for a period longer than the selected time limit.

14. The method of claim 1, further comprising selecting a geographic area, wherein the secure command instructs the mobile device to secure the selected one or more files or folders if the mobile device is not located within the selected geographic area.

15. The method of claim 1, further comprising selecting a geographic area, wherein the secure command instructs the mobile device to secure the selected one or more files or folders if the mobile device is located within the selected geographic area.

16. The method of claim 1, further comprising selecting an Internet Protocol address, wherein the secure command instructs the mobile device to secure the selected one or more files or folders if the mobile device is not connected to the selected Internet Protocol address.

17. The method of claim 1, wherein the mobile device executes the secure command transparently.

18. The method of claim 1, wherein the selecting is performed using a graphical user interface displaying the received directory listing.

19. The method of claim 1, further comprising receiving updates of the directory listing from the mobile device at predetermined intervals.

20. The method of claim 1, wherein if the selected one or more files or folders includes a folder, the secure command instructs the mobile device to secure all of the files within the folder and within any subfolders of the folder.

21. The method of claim 1, wherein if power to the mobile device is interrupted after transmission of the secure command to the mobile device, the mobile device executes the secure command when power to the mobile device is restored.

22. The method of claim 1, wherein at least a portion of the computer code necessary for executing the secure command is not stored locally on the mobile device but is transmitted with the secure command.

23. The method of claim 1, wherein the mobile device replicates a client program stored on the mobile device and transfers the replicated client program along with protected data if the protected data is copied onto a second device.

24. The method of claim 23, wherein the replicated client program installs itself on the second device.

25. The method of claim 24, wherein the replicated client program transmits to the server at least one of a name of the mobile device, a name of the second device, a date and time of copying, a current date and time, a current location of the second device, and a method used to move the copied data.

26. The method of claim 1, further comprising:

transmitting from the server to the mobile device a command instructing the mobile device to take a picture using an integrated digital camera; and

receiving at the server from the mobile device image data representing a picture taken using the integrated camera.

27. The method of claim 1, further comprising:

transmitting from the server to the mobile device a command instructing the mobile device to record video using an integrated digital camera; and

receiving at the server from the mobile device video data representing video recorded using the integrated camera.

28. The method of claim 1, further comprising:

transmitting from the server to the mobile device a command instructing the mobile device to record audio using an integrated microphone; and

receiving at the server from the mobile device audio data representing audio recorded using the integrated microphone.

29. The method of claim 1, further comprising:

transmitting from the server to the mobile device a command instructing the mobile device to record keystrokes using an integrated keylogger; and

receiving at the server from the mobile device data representing keystrokes recorded using the integrated keylogger.

30. The method of claim 1, further comprising:

transmitting from the server to the mobile device a command instructing the mobile device to record computing actions; and

receiving at the server from the mobile device data representing recorded computing actions.

31. A method for securing a mobile device, comprising:

establishing a remote connection between a server and a mobile device; and

transmitting from the server a lock command to the mobile device instructing the mobile device to disable all non-administrative user accounts on the mobile device.

32. The method of claim 31, wherein the lock command further instructs the mobile device to reset a password for an administrator account on the device.

33. The method of claim 31, wherein the lock command further instructs the mobile device to power down.

34. The method of claim 31, further comprising transmitting from the server an unlock command to the mobile device instructing the mobile device to enable the non-administrative user accounts

35. A mobile device, comprising:

a memory configured to store files and folders;

a communication unit configured to connect to a server;

a directory listing module configured to transmit to the server a directory listing indicating the stored files and folders; and

a security module configured to secure one or more of the stored files and folders based on a secure command received from the server.

36. The mobile device of 35, further comprising:

a time unit configured to measure an amount of elapsed time,

wherein the security module is configured to secure the one or more of the stored files and folders if the amount of elapsed time exceeds a predetermined time limit.

37. The mobile device of 35, further comprising:

a geographic location indicator unit configured to identify a current location of the mobile device,

wherein the security module is configured to secure the one or more of the stored files and folders if the identified current location of the mobile device is not within a predetermined geographic area.

38. A system including a server and a mobile device, comprising:

a memory on the mobile device storing files and folders;

a first communication unit on the mobile device configured to transmit to the server a directory listing indicating the files and folders stored on the mobile device;

a user interface on the server configured to display the transmitted directory listing and a plurality of commands and to receive a selection of one or more files or folders indicated by the directory listing and a selection of one of the plurality of commands;

a second communication unit on the server configured to transmit to the mobile device an instruction comprising the selected one or more files or folders and the selected command; and

a client agent on the mobile device configured to secure the selected one or more files or folders by executing the transmitted instruction.