GEOGRAPHICAL RESTRICTIONS FOR APPLICATION USAGE ON A MOBILE DEVICE

• US 20140208397A1
• Filed: 03/24/2014
• Published: 07/24/2014
• Est. Priority Date: 02/11/2011
• Status: Active Grant

• Current Assignee: Blue Cedar Networks, Inc.
• Original Assignee: Mocana Corporation (DigiCert Incorporated)
• Inventors: PETERSON, Erik L.
• Granted Patent: US 9,537,869 B2
• Time in Patent Office: Days
• US Class Current: 726/4
• CPC Class Codes: G06F 21/123 by using dedicated hardware, e.g. dongles, smart cards, cryptographic processors, global positioning systems [GPS] devices
• CPC Class Codes: G06F 21/51 at application loading time, e.g. accepting, rejecting, starting or inhibiting executable software based on integrity or source reliability
• CPC Class Codes: H04L 63/107 wherein the security policies are location-dependent, e.g. entities privileges depend on current location or allowing specific operations only from locally connected terminals
• CPC Class Codes: H04W 12/08 Access security
• CPC Class Codes: H04W 12/30 Security of mobile devices; Security of mobile applications
• CPC Class Codes: H04W 12/37 Managing security policies for mobile devices or for controlling mobile applications
• CPC Class Codes: H04W 12/64 using geofenced areas
• CPC Class Codes: H04W 4/021 Services related to particular areas, e.g. point of interest [POI] services, venue services or geofences

Abstract

Apps are secured or security-wrapped either before they are downloaded onto a device, such as a smart phone or tablet device, or after they are downloaded but before they are allowed to access the device operating system and cause any potential damage to the device. The app is secured before it is allowed to access the operating system of the device, thereby preventing the app from malicious behavior. App object code is substituted with security program object code, thereby creating a security-wrapped app. The app is provisioned with a geo-fencing policy which prevents execution of an app outside a pre-defined geographical area. If the device is within the defined area, the app is allowed to execute. The geographical area, such as a building or company campus, is defined using longitude and latitude coordinates and a location accuracy value. Device location is obtained using location/GPS services on the device.

Claims

1. A method of securing an app for execution on a device using an app security program and a geographical fencing policy, the method comprising:

receiving geographical data defining an area in which an app on the device is allowed to execute;

receiving a location accuracy value;

generating Java class files for the app security program, said Java class files dictated by the geographical fencing policy;

replacing Java class files for the app with the Java class files for the app security program, wherein the Java class files for the app that are being replaced function as a proxy between the app and a device operating system;

creating a security-wrapped app provisioned with the geographical fencing policy upon completion of said replacing of Java class files for the app; and

re-signing the security-wrapped app with a new key.

2. A method as recited in claim 1 wherein the app is provisioned with a geographical fencing policy.

3. A method as recited in claim 1 wherein the geographical data is a top left coordinate and a bottom right coordinate.

4. A method of executing an app on a device comprising:

obtaining location data of the device, including coordinates and an accuracy value;

determining if the accuracy value is less than or equal to a location accuracy setting entered when the app was provisioned;

calculating a circular area based on the location accuracy setting and device coordinates, wherein the device coordinates are used as a center of the circular area and the location accuracy setting is used as the radius of the circular area; and

determining whether the circular area intersects or is within an app usage authorized area, entered when the app was provisioned.

5. A method as recited in claim 4 further comprising:

not allowing execution of the app if the accuracy value is greater than the location accuracy setting.

6. A method as recited in claim 4 further comprising:

enabling execution of the app if the circular area intersects or is within the app-usage authorized area.

7. A method as recited in claim 4 further comprising:

not allowing execution of the app if the circular area does not intersect or is not within the app-usage authorized area.

8. A method as recited in claim 4 further comprising:

not allowing execution if the app-usage authorized area does not encompass the coordinates.