INTELLIGENT AGENT FOR PRIVACY AND SECURITY

• US 20140282908A1
• Filed: 03/12/2014
• Published: 09/18/2014
• Est. Priority Date: 03/13/2013
• Status: Abandoned Application

• Current Assignee: Location Sentry Corp.
• Original Assignee: Location Sentry Corp.
• Inventors: WARD, Matthew L., SPIEGELBERG, Craig E.
• Application Number:
  US14/207,417
• Publication Number:
  US 20140282908A1
• Time in Patent Office: Days
• US Class Current: 726/4
• CPC Class Codes: H04L 63/145 the attack involving the propagation of malware through the network, e.g. viruses, trojans or worms
• CPC Class Codes: H04W 12/128 Anti-malware arrangements, e.g. protection against SMS fraud or mobile malware
• CPC Class Codes: H04W 12/37 Managing security policies for mobile devices or for controlling mobile applications

Abstract

A system and method are provided for use with a mobile device. The system is configurable to detect unauthorized access to onboard sensors or information developed by the sensors or configured by the user. Upon detection, access may be denied or limited according to pre-set rules or user intervention. The rules may consider prior access attempts, time-of-day or current location in the denial or limitation of access. Access limitation can include limiting access to only dithered data or spoofed data in accordance to the rules or user instructions.

Claims

1. An apparatus comprising:

at least one processor; and

at least one memory including computer program code that, when executed by the at least one processor, directs the apparatus to;

monitor requests for information associated with a user of a mobile device;

intercept at least one request, which is sent from a source, for information from the requests for information;

review a profile, which is associated with the source, established for access to the information by the at least one request; and

provide at least one response to the request, wherein the at least one response is compliant with at least one rule established to control content of the at least one response.

2. The apparatus of claim 1, wherein the code further applies the at least one rule to modify access granted by the profile in order to control the content by formatting the at least one response.

3. The apparatus of claim 2, wherein the format is selected from the group including a blocked format, a dithered format, a default format, a spoofed format, and an allowed format.

4. The apparatus of claim 1 further comprising a user interface in communication with the at least one processor and further code that causes the apparatus to allow the user to establish, at least one of, the rule and the profile.

5. The apparatus of claim 4, wherein the at least one response to the request includes information based on the user'"'"'s authorization through the user interface.

6. The apparatus of claim 1, further comprising a communication module in communication with the processor and further code that causes the apparatus to:

receive, at least one of, the rule and the profile from a management system; and

store, at least one of, the rule and the profile in the at least one memory.

7. The apparatus of claim 6, further comprising a sensor electrically connected to and in communication with the processor and further code that causes the apparatus to include sensor information as part of the content.

8. The apparatus of claim 7, wherein the sensor data includes at least one of dithered and spoofed information.

9. The apparatus of claim 7 wherein the sensor information is provided by, at least one of, a camera, a microphone, a motion sensor, and a location sensor.

10. The apparatus of claim 1 including further code that causes the apparatus to:

generate a log of the requests and the at least one response; and

upload the log to a remote server.

11. A computer program product comprising at least one computer-readable non-transitory storage medium including computer-readable program code portions stored therein, the computer-readable program code portions comprising:

a first executable portion for monitoring a database that includes at least one profile associated with a requestor, wherein the profile defines a level of access for the requestor to information on a device;

a second executable portion for intercepting a request from the requestor for the information; and

a third executable portion for modifying the level of access based on a rule that is related to the profile and thereby provide a response to the request based on the rules.

12. The computer program product of claim 11 further comprising a fourth executable portion for accessing device knowledge, wherein the device knowledge includes, at least one of, time-of-day and current location.

13. The computer program product of claim 11 further comprising a fourth executable portion for:

determining the device'"'"'s knowledge regarding a first source of a first request selected from the plurality of requests, wherein the source of the first request is associated with an application accessible by the device;

determining the device'"'"'s knowledge regarding a second source of a second request selected from the plurality of requests, wherein the source of the second request is associated with the application; and

comparing the first source and the second source.

14. The computer program product of claim 13 wherein the response is altered based on a second rule when the first source is different from the second source.

15. A mobile device comprising:

a processor;

a memory accessible by the processor for storing code and information;

a communication module controlled by the processor for communicate with a network;

a display electrically connected to the processor for allowing user input; and

at least one sensor in electrical communication with the processor for collecting the information,

wherein instructions are executed by the processor to cause the mobile device to limit access to the information through at least one rule and at least one profile, and

wherein an access attempt and a response to an access attempt are logged.

16. The mobile device of claim 15, wherein the at least one rule and the at least one profile are loaded into the mobile device from a remote location through the communication module.

17. The mobile device of claim 15, wherein the at least one rule is loaded into the mobile device by the user through the display.

18. The mobile device of claim 15, wherein the user is able to alter the limit on access to the information based on alerts presented through the display.

19. A method comprising the steps of:

intercepting a request;

determining a source of the request;

reading from memory a profile associated with the source, wherein the profile grants a level of access that the source has to information available at a device, which information can be provided in a response to the request;

applying a rule associated with the profile to determine if the access level granted by the profile should be modified;

adapting the access level granted by the profile to the source; and

formatting the response, wherein the response is compliant with the rule.

20. The method of claim 19, wherein the step of formatting includes altering the format of the response, wherein the format is selected from the group including:

a blocked format, a dithered format, a default format, a spoofed format, and an allowed format.