CLOUD BASED MOBILE DEVICE SECURITY AND POLICY ENFORCEMENT

• US 20120240183A1
• Filed: 09/23/2011
• Published: 09/20/2012
• Est. Priority Date: 03/18/2011
• Status: Active Grant

• Current Assignee: Zscaler Incorporated
• Original Assignee: Zscaler Incorporated
• Inventors: SINHA, Amit
• Granted Patent: US 9,119,017 B2
• Time in Patent Office: Days
• US Class Current: 726/1
• CPC Class Codes: H04L 63/104 Grouping of entities
• CPC Class Codes: H04L 63/1425 Traffic logging, e.g. anomaly detection
• CPC Class Codes: H04L 63/1441 Countermeasures against malicious traffic countermeasures against attacks on cryptographic mechanisms H04L9/002
• CPC Class Codes: H04L 63/145 the attack involving the propagation of malware through the network, e.g. viruses, trojans or worms
• CPC Class Codes: H04L 63/20 for managing network security; network security policies in general filtering policies H04L63/0227
• CPC Class Codes: H04L 67/306 User profiles
• CPC Class Codes: H04W 12/086 using security domains
• CPC Class Codes: H04W 12/088 using filters or firewalls
• CPC Class Codes: H04W 12/128 Anti-malware arrangements, e.g. protection against SMS fraud or mobile malware
• CPC Class Codes: H04W 4/60 Subscription-based services using application servers or record carriers, e.g. SIM application toolkits

Abstract

The present disclosure relates to cloud based mobile device security and policy systems and methods to use the “cloud” to pervasively enforce security and policy on mobile devices. The cloud based mobile device security and policy systems and methods provide uniformity in securing mobile devices for small to large organizations. The cloud based mobile device security and policy systems and methods may enforce one or more policies for users wherever and whenever the users are connected across a plurality of different devices including mobile devices. This solution ensures protection across different types, brands, operating systems, etc. for smartphones, tablets, netbooks, mobile computers, and the like.

Claims

1. A cloud based security method for a mobile device, comprising:

providing a mobile configuration to the mobile device, the mobile configuration configured to provide communications between the mobile device and external network through a cloud based system;

receiving communications from the mobile device for the external network;

analyzing the communications from the mobile device for policy and security compliance therewith; and

blocking the communications from the mobile device based on a violation of the policy and security compliance.

2. The cloud based security method of claim 1, further comprising:

if the communications from the mobile device are blocked, providing a notification of the blocking to the mobile device, the notification providing a reason for the blocking.

3. The cloud based security method of claim 1, further comprising:

receiving communications from the external network for the mobile device;

analyzing the communications from the external network for policy and security compliance therewith; and

blocking the communications from the external network based on a violation of the policy and security compliance.

4. The cloud based security method of claim 3, further comprising:

if the communications from the external network are blocked, providing a notification of the blocking to the mobile device, the notification providing a reason for the blocking.

5. The cloud based security method of claim 1, further comprising:

providing the mobile configuration to the mobile device via a two dimensional bar code input into the mobile device.

6. The cloud based security method of claim 1, further comprising:

receiving communications from the mobile device for the external network over a Virtual Private Network (VPN).

7. The cloud based security method of claim 1, further comprising:

receiving communications from the mobile device for the external network over a Secure Socket Layer (SSL) Virtual Private Network (VPN).

8. The cloud based security method of claim 1, further comprising:

defining policy for one or more users associated with the cloud based system, wherein the policy is enforced based on the one or more users and not on an underlying device of the one or more users.

9. The cloud based security method of claim 1, further comprising:

aggregating events based on the filtering in a log.

10. A mobile device, comprising:

a network interface configured to connect to a wireless network;

memory; and

a processor, the network interface, the memory, and the processor are communicatively coupled therebetween;

wherein the processor with the network interface and the memory is configured to;

connect to a cloud based security system over the wireless network;

communicate data with an external network through the cloud based security system; and

receive notifications of content blocking of the data from the cloud based security system based on security and policy violations.

11. The mobile device of claim 10, wherein the notifications comprise a reason for content blocking.

12. The mobile device of claim 10, further comprising:

an input device, wherein the input device is configured to receive a two dimensional bar code for a mobile device configuration profile.

13. The mobile device of claim 10, wherein the network interface connects to the cloud based security system over an Internet Protocol security (IPsec) Virtual Private Network (VPN).

14. The mobile device of claim 10, wherein the network interface connects to the cloud based security system over a Secure Socket Layer (SSL) Virtual Private Network (VPN).

15. A cloud network configured to perform mobile device security and policy enforcement, comprising:

a plurality of cloud nodes communicatively coupled to a network, each of the plurality of cloud nodes is configured to;

communicate with a mobile device; and

perform mobile device policy and security enforcement of the mobile device while concurrently providing access to the network.

16. The cloud network device of claim 15, wherein the mobile device connects to one of the cloud nodes over an Internet Protocol security (IPsec) Virtual Private Network (VPN).

17. The cloud network device of claim 15, wherein the mobile device connects to one of the cloud nodes over a Secure Socket Layer (SSL) Virtual Private Network (VPN).