SYSTEM AND METHOD FOR ASSESSING AN APPLICATION TO BE INSTALLED ON A MOBILE COMMUNICATION DEVICE

• US 20130263260A1
• Filed: 05/17/2013
• Published: 10/03/2013
• Est. Priority Date: 10/21/2008
• Status: Active Grant

• Current Assignee: Lookout Incorporated
• Original Assignee: Lookout Incorporated
• Inventors: Mahaffey, Kevin Patrick, Hering, John Gunther, Burgess, James David, Grubb, Jonathan Pantera, Golombek, David, Richardson, David Luke, Lineberry, Anthony McKay, Wyatt, Timothy Micheal
• Granted Patent: US 9,740,852 B2
• Time in Patent Office: Days
• US Class Current: 726/22
• CPC Class Codes: G06F 11/3013 where the computing system is an embedded system, i.e. a combination of hardware and software dedicated to perform a certain function in mobile devices, printers, automotive or aircraft systems testing or monitoring of control systems or parts thereof G05B23/02
• CPC Class Codes: G06F 21/50 Monitoring users, programs or devices to maintain the integrity of platforms, e.g. of processors, firmware or operating systems
• CPC Class Codes: G06F 21/564 by virus signature recognition
• CPC Class Codes: G06F 2212/171 Portable consumer electronics, e.g. mobile phone

Abstract

A system and method checks for harmful behavior of an application to be installed on a mobile communication device. A server computer receives from the mobile communication device data pertaining to the application to be installed and information pertaining to the mobile communication device. The server processes the data and information to determine an assessment for the application to be installed. The assessment is provided to the mobile communication device and the assessment is displayed on the device if the assessment is one of dangerous and potentially dangerous.

Claims

1. A method of checking for harmful behavior of an application to be installed on a mobile communication device, the method comprising:

receiving at a server computer from the mobile communication device, data pertaining to the application to be installed and information pertaining to the mobile communication device;

processing, by the server computer, the data and the information to determine an assessment for the application to be installed;

providing the assessment to the mobile communication device; and

displaying the assessment on the mobile communication device if the assessment is one of dangerous and potentially dangerous.

2. The method of claim 1, further comprising:

allowing installation of the application if the assessment is not one of dangerous and potentially dangerous.

3. The method of claim 1, further comprising:

when the assessment is dangerous, displaying on the mobile communication device an alert that installation of the application has been blocked.

4. The method of claim 1, further comprising:

when the assessment is potentially dangerous, displaying a warning on the mobile communication device a warning with an option to install the application.

5. The method of claim 1, wherein the data pertaining to the application is selected from a group consisting of application name, application size, application SHA1 value, application version, application metadata, application traffic IP address, application communication port and URL associated with the application.

6. The method of claim 1, wherein the information pertaining to the mobile communication device is selected from a group consisting of device data, device operating system, firmware version, memory capacity, available communication ports, battery limitations, hardware characteristics, default specifications, service provider and IP address.

7. The method of claim 1, wherein the application is side-loaded.

8. The method of claim 1, wherein the application is provided to the mobile communication device by an app marketplace.

9. The method of claim 1, wherein the assessment is also based upon data and information received by the server computer from sources other than the mobile communication device.

10. The method of claim 1, wherein the assessment is also based upon data and information received by the server computer from other devices similar to the mobile communication device.

11. A non-transitory computer readable storage medium for use with a server computer checking for harmful behavior of an application to be installed on a mobile communication device, the non-transitory computer readable storage medium containing computer readable instructions, which when executed by a processor cause the processor to perform the steps of a method comprising:

receiving at a server computer from the mobile communication device, data pertaining to the application to be installed and information pertaining to the mobile communication device;

processing, by the server computer, the data and the information to determine an assessment for the application to be installed;

providing the assessment to the mobile communication device; and

displaying the assessment on the mobile communication device if the assessment is one of dangerous and potentially dangerous.

12. The non-transitory computer readable storage medium of claim 11, further comprising:

allowing installation of the application if the assessment is not one of dangerous and potentially dangerous.

13. The non-transitory computer readable storage medium of claim 11, further comprising:

when the assessment is dangerous, displaying on the mobile communication device an alert that installation of the application has been blocked.

14. The non-transitory computer readable storage medium of claim 11, further comprising:

when the assessment is potentially dangerous, displaying a warning on the mobile communication device with an option to install the application.

15. The non-transitory computer readable storage medium of claim 11, wherein the data pertaining to the application is selected from a group consisting of application name, application size, application SHA1 value, application version, application metadata, application traffic IP address, application communication port and URL associated with the application.

16. The non-transitory computer readable storage medium of claim 11, wherein the information pertaining to the mobile communication device is selected from a group consisting of device data, device operating system, firmware version, memory capacity, available communication ports, battery limitations, hardware characteristics, default specifications, service provider and IP address.

17. The non-transitory computer readable storage medium of claim 11, wherein when application is side-loaded.

18. The non-transitory computer readable storage medium of claim 11, wherein the application is provided to the mobile communication device by an app marketplace.

19. The non-transitory computer readable storage medium of claim 11, wherein the assessment is also based upon data and information received by the server computer from sources other than the mobile communication device.

20. The non-transitory computer readable storage medium of claim 11, wherein the assessment is also based upon data and information received by the server computer from other devices similar to the mobile communication device.