ENTERPRISE-WIDE SECURITY SYSTEM FOR COMPUTER DEVICES

• US 20110162049A1
• Filed: 12/17/2010
• Published: 06/30/2011
• Est. Priority Date: 08/27/2002
• Status: Active Grant

• Current Assignee: Musarubra US LLC (Musarubra US SellCo LLC)
• Original Assignee: McAfee, Inc. (McAfee, LLC)
• Inventors: Shahbazi, Majid
• Granted Patent: US 8,341,693 B2
• Time in Patent Office: Days
• US Class Current: 726/4
• CPC Class Codes: G06F 21/50 Monitoring users, programs or devices to maintain the integrity of platforms, e.g. of processors, firmware or operating systems
• CPC Class Codes: G06F 21/55 Detecting local intrusion or implementing counter-measures
• CPC Class Codes: G06F 21/577 Assessing vulnerabilities and evaluating computer system security
• CPC Class Codes: G06F 21/606 by securing the transmission between two devices or processes
• CPC Class Codes: G06F 21/6218 to a system of files or objects, e.g. local or distributed file system or database
• CPC Class Codes: G06F 2221/2111 Location-sensitive, e.g. geographical location, GPS
• CPC Class Codes: G06F 2221/2137 Time limited access, e.g. to a computer or data
• CPC Class Codes: H04L 63/1408 by monitoring network traffic monitoring network traffic per se H04L43/00
• CPC Class Codes: H04L 63/20 for managing network security; network security policies in general filtering policies H04L63/0227
• CPC Class Codes: H04W 12/02 Protecting privacy or anonymity, e.g. protecting personally identifiable information [PII]
• CPC Class Codes: H04W 12/03 Protecting confidentiality, e.g. by encryption
• CPC Class Codes: H04W 12/084 using delegated authorisation, e.g. open authorisation [OAuth] protocol
• CPC Class Codes: H04W 12/086 using security domains

Abstract

A system and method for securing data in mobile devices (104) includes a computing mode (102) and a plurality of mobile devices (104). A node security program (202) executed in the computing node (102) interfaces with a device security program (204) executed at a mobile device (104). The computing node (102) is responsible for managing the security based on a node security profile (208) interpreted by a node security program (202) executed in the computing node (102). A device discovery method and arrangement (106) also detects and locates various information (120) about the mobile devices (104) based on a scan profile (206).

Claims

1-25. -25. (canceled)

26. A method, comprising:

communicating with a mobile device from a computing node, which includes a node security program configured to interpret a security profile; and

determining at least one security parameter in order to manage a process involving the mobile device; and

determining that the process is not authorized such that activities are restricted on the mobile device.

27. The method of claim 26, wherein the mobile device is locked for usage purposes based on determining that the process is not authorized.

28. The method of claim 26, wherein the process is associated with an unauthorized incoming process.

29. The method of claim 26, wherein the process is associated with an unauthorized outgoing process.

30. The method of claim 26, wherein the process is associated with a data transfer associated with the mobile device.

31. The method of claim 26, wherein the process is associated with a data synchronization involving the mobile device.

32. The method of claim 26, wherein the process is associated with password protection in the context of a data transfer.

33. The method of claim 26, wherein the process is associated with a file and a program access associated with the mobile device.

34. The method of claim 26, wherein the process is associated with accessing files from a network.

35. The method of claim 26, wherein the security profile comprises at least one of a text, .ini and binary, XML format.

36. Logic encoded in non-transitory tangible media that includes code for execution and when executed by a processor is operable to perform operations comprising:

communicating with a mobile device from a computing node, which includes a node security program configured to interpret a security profile; and

determining at least one security parameter in order to manage a process involving the mobile device; and

determining that the process is not authorized such that activities are restricted on the mobile device.

37. The logic of claim 36, wherein the mobile device is locked for usage purposes based on determining that the process is not authorized.

38. The logic of claim 36, wherein the process is associated with a data transfer associated with the mobile device.

39. The logic of claim 36, wherein the process is associated with a data synchronization involving the mobile device.

40. The logic of claim 36, wherein the process is associated with a file and a program access associated with the mobile device.

41. The logic of claim 36, wherein the process is associated with accessing files from a network.

42. An apparatus, comprising:

a computing node that includes a node security program configured to interpret a security profile, the apparatus being configured for;

communicating with a mobile device, which; and

determining at least one security parameter in order to manage a process involving the mobile device; and

determining that the process is not authorized such that activities are restricted on the mobile device, wherein the process is associated with a data transfer associated with the mobile device.

43. The apparatus of claim 42, wherein the process is associated with a data synchronization involving the mobile device.

44. The apparatus of claim 42, wherein the process is associated with a file and a program access associated with the mobile device.

45. The apparatus of claim 42, wherein the process is associated with accessing files from a network.