Unauthorized Location Detection and Countermeasures

• US 20120167207A1
• Filed: 12/22/2010
• Published: 06/28/2012
• Est. Priority Date: 12/22/2010
• Status: Active Grant

• Current Assignee: Skyhook Holding, Inc. (Liberty Broadband Corp.)
• Original Assignee: TruePosition Incorporated
• Inventors: Anderson, Robert J., Ward, Matthew L., Beckley, Frederic A.
• Granted Patent: US 8,627,484 B2
• Time in Patent Office: Days
• US Class Current: 726/22
• CPC Class Codes: H04W 12/02 Protecting privacy or anonymity, e.g. protecting personally identifiable information [PII]
• CPC Class Codes: H04W 12/08 Access security
• CPC Class Codes: H04W 12/12 Detection or prevention of fraud
• CPC Class Codes: H04W 4/02 Services making use of location information
• CPC Class Codes: H04W 4/029 Location-based management or tracking services
• CPC Class Codes: H04W 4/50 Service provisioning or reconfiguring

Abstract

A location sentry system is provided for use within a mobile device. The sentry system can be configured to detect unauthorized attempts to locate mobile devices by monitoring messages passed between the mobile device and the wireless network and/or messages passed between components of the mobile device, and determining that one or more of the messages is/are indicative of an attempt to locate the mobile device. In response to a determination that an unauthorized attempt has been detected, the location sentry can be configured to take one or more actions. For example, the location sentry system could prevent location information from being sent back to the wireless network and/or the location sentry system could cause incorrect information to be sent to the wireless network.

Claims

1. A mobile device operable to communicate with a wireless network and configured to detect unauthorized location attempts, comprising:

a processor; and

a memory coupled to the processor, the memory including instructions that upon execution cause the processor to execute an operational procedure, the memory comprising;

instructions for identifying a sequence of events that includes an event indicating that a location subsystem of the mobile device was activated;

instructions for determining that the sequence of events is indicative of an unauthorized attempt to locate the mobile device; and

instructions for logging the sequence of events as an unauthorized attempt to locate the mobile device.

2. The mobile device of claim 1, wherein the instructions for determining that the sequence of events is indicative of an unauthorized attempt to locate the mobile device further comprise:

instructions for determining that the sequence of events includes an event indicating that location information was placed in an outgoing message queue.

3. The mobile device of claim 1, wherein the instructions for determining that the sequence of events is indicative of an unauthorized attempt to locate the mobile device further comprise:

instructions for determining that the sequence of events includes an event indicating that a global positioning system receiver of the mobile device was activated.

4. The mobile device of claim 1, wherein the instructions for determining that the sequence of events is indicative of an unauthorized attempt to locate the mobile device further comprise:

instructions for determining that the sequence of events includes an event indicating that the mobile device entered into a scanning mode for receiving beacon timing information from a plurality of base stations.

5. The mobile device of claim 1, wherein the instructions for determining that the sequence of events is indicative of an unauthorized attempt to locate the mobile device further comprise:

instructions for determining that the sequence of events includes an event indicating that a request for location information was received from the wireless network.

6. The mobile device of claim 1, wherein the instructions for determining that the sequence of events is indicative of an unauthorized attempt to locate the mobile device further comprise:

instructions for determining that the sequence of events includes an event indicating that a program executing on the mobile device requested to access the location subsystem; and

instructions for determining that the program is not authorized to access the location subsystem.

7. The mobile device of claim 6, wherein the program is a program stored on a SIM card.

8. The mobile device of claim 1, wherein the instructions for determining that the sequence of events is indicative of an unauthorized attempt to locate the mobile device further comprise:

instructions for determining that the sequence of events includes an event indicating that data used to assist in a location calculation was received from a wireless network.

9. The mobile device of claim 1, wherein the instructions for determining that the sequence of events is indicative of an unauthorized attempt to locate the mobile device further comprise:

instructions for determining that the sequence of events includes an event indicating that the mobile device transitioned from an idle mode to an active mode.

10. The mobile device of claim 1, wherein the memory further comprises:

instructions for displaying an alert indicating that an unauthorized attempt to locate the mobile device was identified.

11. The mobile device of claim 1, wherein the memory further comprises:

instructions for sending an error message to the wireless network indicating that the mobile device cannot support a location attempt.

12. The mobile device of claim 1, wherein the memory further comprises:

instructions for sending a message to the wireless network that indicates that the mobile device does not include a location subsystem.

13. The mobile device of claim 1, wherein the memory further comprises:

instructions for sending inaccurate location information to the wireless network.

14. The mobile device of claim 1, wherein the memory further comprises:

instructions for sending location information for a default location to the wireless network.

15. The mobile device of claim 1, wherein the memory further comprises:

instructions for sending location information for a previous location to the wireless network.

16. The mobile device of claim 1, wherein the memory further comprises:

instructions for sending inaccurate satellite measurement information to the wireless network.

17. The mobile device of claim 1, wherein the memory further comprises:

instructions for sending inaccurate location related signal measurement data to the wireless network.

18. The mobile device of claim 1, wherein the memory further comprises:

instructions for sending a cell-ID identifier randomly selected from a group of active set cells to the wireless network.

19. The mobile device of claim 1, wherein the memory further comprises:

instructions for sending identifiers for a subset of detected beacon signals to the wireless network.

20. The mobile device of claim 1, wherein the memory further comprises:

instructions for sending information to the wireless network indicating that satellite coverage is inadequate to receive satellite signals.

21. The mobile device of claim 1, wherein the memory further comprises:

instructions for a receiver-location sentry client application that encapsulates an application program interface for a wireless receiver, wherein the receiver-location sentry client application is configured to analyze incoming messages received by the wireless receiver;

instructions for a transmitter-location sentry client application that encapsulates an application program interface for a wireless transmitter, wherein the transmitter-location sentry client application is configured to analyze messages placed into an outgoing queue for transmission to the wireless network; and

instructions for a location-subsystem-location sentry client application that encapsulates an application program interface for the location subsystem, wherein the location-subsystem-location sentry client application is configured to analyze messages sent to location subsystem.

22. The mobile device of claim 1, wherein the memory further comprises:

instructions for running an operating system for the mobile device within a virtualization environment, wherein the virtualization environment is configured to monitor messages received by the wireless receiver, messages placed into an outgoing queue for transmission to the wireless network, and messages sent to location subsystem for messages indicative of attempts to locate the mobile device.

23. The mobile device of claim 1, wherein the memory further comprises:

instructions for a wireless receiver application program interface, wherein the wireless receiver application program interface is configured to monitor incoming messages for messages that include location requests and/or messages that include data used to assist in a location calculation;

instructions for a wireless transmitter application program interface, wherein the wireless transmitter application program interface is configured to monitor outgoing messages for messages that include location information; and

instructions for a location subsystem application program interface, wherein the location subsystem application program interface is configured to monitor messages sent to the location subsystem for unauthorized attempts to activate the location subsystem.

24. A computer-readable storage medium including a location sentry system for use in a mobile device, the computer-readable storage medium comprising:

instructions for logging a group of events in a database of the mobile device;

instructions for detecting, in the group of events, an event indicating that location information was placed in an outgoing message queue for transmission to a base station;

instructions for determining that the sequence of events is indicative of an unauthorized attempt to locate the mobile device; and

instructions for logging the group of events as an attempt to locate the mobile device.

25. The computer-readable storage medium of claim 24, wherein the instructions for determining that the group of events is indicative of an unauthorized attempt to locate the mobile device further comprise:

instructions for determining that an event is present within the group of events that indicates that a location subsystem was accessed.

26. The computer-readable storage medium of claim 24, wherein the instructions for determining that the group of events is indicative of an unauthorized attempt to locate the mobile device further comprise:

instructions for determining that an event is present within the group of events that indicates that a global positioning system receiver of the mobile device was activated.

27. The computer-readable storage medium of claim 24, wherein the instructions for determining that the group of events is indicative of an unauthorized attempt to locate the mobile device further comprise:

instructions for determining that an event is present within the group of events that indicates that the mobile device entered into a scanning mode for receiving beacon timing information from a plurality of base stations.

28. The computer-readable storage medium of claim 24, wherein the instructions for determining that the group of events is indicative of an unauthorized attempt to locate the mobile device further comprise:

instructions for determining that an event is present within the group of events that indicates that a request for location information was received.

29. The computer-readable storage medium of claim 24, wherein the instructions for determining that the group of events is indicative of an unauthorized attempt to locate the mobile device further comprise:

instructions for determining that an event is present within the group of events that indicates that an unauthorized program executing on the mobile device attempted to access the location subsystem.

30. The computer-readable storage medium of claim 24, wherein the instructions for determining that the group of events is indicative of an unauthorized attempt to locate the mobile device further comprise:

instructions for determining that an event is present within the group of events that indicates that data used to assist in a location calculation was received from a wireless network.

31. The computer-readable storage medium of claim 24, wherein the instructions for determining that the group of events is indicative of an unauthorized attempt to locate the mobile device further comprise:

instructions for determining that an event is present within the group of events that indicates that the mobile device transitioned from an idle mode to an active mode.

32. The computer-readable storage medium of claim 24, further comprising:

instructions for displaying an alert indicating that an attempt to locate the mobile device was detected.

33. The computer-readable storage medium of claim 24, further comprising:

instructions for removing the location information from the outgoing message queue.

34. The computer-readable storage medium of claim 24, further comprising:

instructions for sending an error message to the network responsive to the determination that the group of events is indicative of an unauthorized attempt to locate the mobile device.

35. The computer-readable storage medium of claim 24, further comprising:

instructions for sending a message to the network that indicates that the mobile device does not include a location subsystem responsive to the determination that the group of events is indicative of an unauthorized attempt to locate the mobile device.

36. The computer-readable storage medium of claim 24, further comprising:

instructions for replacing the location information with inaccurate location information responsive to the determination that the group of events is indicative of an unauthorized attempt to locate the mobile device.

37. The computer-readable storage medium of claim 24, further comprising:

instructions for replacing the location information with default location information responsive to a determination that the group of events is indicative of an unauthorized attempt to locate the mobile device.

38. The computer-readable storage medium of claim 24, further comprising:

instructions for sending location information for a previous location to a wireless network responsive to the determination that the group of events is indicative of an unauthorized attempt to locate the mobile device.

39. The computer-readable storage medium of claim 24, further comprising:

instructions for sending inaccurate satellite measurement information to a wireless network responsive to the determination that the group of events is indicative of an unauthorized attempt to locate the mobile device.

40. The computer-readable storage medium of claim 24, further comprising:

instructions for sending inaccurate location related signal measurement data to a wireless network responsive to the determination that the group of events is indicative of an unauthorized attempt to locate the mobile device.

41. The computer-readable storage medium of claim 24, further comprising:

instructions for sending a cell-ID identifier randomly selected from a group of active set cells to a wireless network responsive to the determination that the group of events is indicative of an unauthorized attempt to locate the mobile device.

42. The computer-readable storage medium of claim 24, further comprising:

instructions for sending identifiers for a subset of detected beacon signals to a wireless network responsive to the determination that the group of events is indicative of an unauthorized attempt to locate the mobile device.

43. The computer-readable storage medium of claim 24, further comprising:

instructions for sending information that indicates inadequate satellite coverage to a wireless network responsive to the determination that the group of events is indicative of an unauthorized attempt to locate the mobile device.

44. The computer-readable storage medium of claim 24, further comprising:

instructions for a receiver-module that encapsulates an application program interface for a wireless receiver, wherein the receiver-module is configured to analyze incoming messages for requests for location information and/or data used to assist in a location calculation;

instructions for a transmitter-module that encapsulates an application program interface for a wireless transmitter, wherein the transmitter-module is configured to analyze messages placed into an outgoing queue for unauthorized attempts to transmit location information; and

instructions for a location-subsystem-module that encapsulates an application program interface for the location subsystem, wherein the location-subsystem-module is configured to analyze messages for unauthorized attempts to access the location subsystem.

45. The computer-readable storage medium of claim 24, further comprising:

instructions for running an operating system for the mobile device within a virtualization environment, wherein the virtualization environment is configured to analyze messages received by the wireless receiver, messages placed into an outgoing queue for transmission to a wireless network, and messages sent to location subsystem for messages indicative of unauthorized attempts to locate the mobile device.

46. The computer-readable storage medium of claim 24, further comprising:

instructions for a wireless receiver application program interface, wherein the wireless receiver application program interface is configured to monitor incoming messages for messages that include location requests and/or messages that include data used to assist in a location calculation;

instructions for a wireless transmitter application program interface, wherein the wireless transmitter application program interface is configured to monitor outgoing messages for unauthorized attempts to transmit location information; and

instructions for a location subsystem application program interface, wherein the location subsystem application program interface is configured to monitor for unauthorized attempts to activate the location subsystem.

47. A location sentry method for use in a mobile device, comprising:

analyzing, by a first location sentry module encapsulating a wireless receiver application program interface, message traffic for messages indicative of requests for location information; and

displaying an alert on a user interface of the mobile device indicating that an unauthorized attempt to locate the mobile device was detected in response to detecting a message indicative of a request for location information.

48. The method of claim 47, further comprising:

analyzing, by a second location sentry module encapsulating an application program interface that interfaces a location subsystem with the operating system, attempts to access the location subsystem for unauthorized attempts to access the location subsystem; and

displaying the alert on a user interface of the mobile device indicating that an attempt to locate the mobile device was detected in response to detecting that an unauthorized program accessed the location subsystem.

49. The method of claim 47, further comprising:

analyzing, by a third location sentry module encapsulating a wireless transmitter application program interface, messages placed within an outgoing message queue for the wireless transmitter for unauthorized attempts to transmit location information; and

displaying the alert on a user interface of the mobile device indicating that an unauthorized attempt to locate the mobile device was detected in response to detecting a message within the outgoing message queue that includes location information that was sent by an unauthorized program.

50. A mobile device configured to detect unauthorized location attempts, comprising:

means for emulating a wireless radio transmitter subsystem for a wireless receiver configured to receive messages from a wireless radio transmitter subsystem for transmission to a wireless network and analyze the messages for attempts to transmit location information to a wireless network; and

means for causing an alert to be displayed on a user interface responsive to a determination that an attempt to transmit location information was detected.

51. The mobile device of claim 50, further comprising:

means for emulating a location subsystem configured to receive a request to access the location subsystem; and

means for determining that the request is indicative of an attempt to locate the mobile device.

52. The mobile device of claim 50, further comprising:

means for emulating a wireless receiver subsystem configured to receive a message including a request for location information; and

means for determining that the message is indicative of an attempt to locate the mobile device.

53. A computer-readable medium for use in a mobile device including a location sentry configured to detect unauthorized attempts to locate the mobile device, comprising:

instructions for a location subsystem application program interface configured to receive requests to access the location subsystem and monitor the requests for unauthorized attempts to access the location subsystem; and

instructions for displaying an alert on a user interface in response to detecting an unauthorized attempt to access the location subsystem.

54. The computer-readable storage medium of claim 53, further comprising:

instructions for a wireless receiver subsystem application program interface configured to receive messages from the wireless receiver subsystem and monitor the messages for location information requests; and

wherein the instructions for the wireless receiver subsystem application program interface are further configured to determine that location information requests are indicative of attempts to locate the mobile device.

55. The computer-readable storage medium of claim 53, further comprising:

instructions for a wireless transmitter subsystem application program interface configured to monitor messages from applications for messages including location information; and

wherein the instructions for the wireless transmitter subsystem application program interface are further configured to determine that messages including location information are indicative of attempts to locate the mobile device.

56. A mobile device configured to operate within a wireless network and configured to detect unauthorized attempts to locate the mobile device, comprising:

a processor; and

a memory coupled to the processor, wherein the memory includes instructions that upon execution cause the processor to;

detect an unauthorized attempt to locate the mobile device; and

send incorrect information to the wireless network in responsive to the detection of the unauthorized attempt to locate the mobile device.

57. The mobile device of claim 56, wherein the incorrect information includes coordinates for a default location, a previous location, or an inaccurate location.

58. The mobile device of claim 56, wherein the incorrect information includes information reporting inadequate satellite coverage, degraded satellite broadcast measurements, previous satellite broadcast measurements, or preset satellite broadcast measurements.

59. The mobile device of claim 56, wherein the incorrect information includes information that indicates that the mobile device cannot support the request.

60. The mobile device of claim 56, wherein the incorrect information includes information that identifies a subset of detected beacon signals or degraded beacon signal strength information.