Systems and Methods for Identifying Applications in Mobile Networks

• US 20140330960A1
• Filed: 05/02/2014
• Published: 11/06/2014
• Est. Priority Date: 05/03/2013
• Status: Abandoned Application

• Current Assignee: Telefonaktiebolaget LM Ericsson
• Original Assignee: Telefonaktiebolaget LM Ericsson
• Inventors: Hga, Pter, Kenesi, Zsolt, Toka, Lszl, Veres, Andrs
• Application Number:
  US14/268,529
• Publication Number:
  US 20140330960A1
• Time in Patent Office: Days
• US Class Current: 709/224
• CPC Class Codes: G06F 21/552 involving long-term monitoring or reporting
• CPC Class Codes: G06F 21/566 Dynamic detection, i.e. detection performed at run-time, e.g. emulation, suspicious activities
• CPC Class Codes: G06F 2221/2135 Metering
• CPC Class Codes: H04L 43/04 Processing captured monitoring data, e.g. for logfile generation
• CPC Class Codes: H04L 63/1425 Traffic logging, e.g. anomaly detection
• CPC Class Codes: H04L 63/145 the attack involving the propagation of malware through the network, e.g. viruses, trojans or worms
• CPC Class Codes: H04W 12/128 Anti-malware arrangements, e.g. protection against SMS fraud or mobile malware
• CPC Class Codes: H04W 12/68 Gesture-dependent or behaviour-dependent

Abstract

A method for identifying an application installed in a user device of a communication system is disclosed. Based on user device and network resources utilized by the user device and installation information about applications installed application, an identification of an application can be performed. An advantage with embodiments of this invention is that an application can be identified, without prior information how the application affects user device and network resources. Malicious and noxious applications can thereby be identified. Also, a resource consumption reporting service offered to the subscribers by the operator is enabled.

Claims

1. A method for identifying an application installed in a user device of a communication system, the method being performed in the communication system and comprising:

obtaining information about user device resources utilized by the user device;

obtaining information about network resources utilized by the user device;

storing the obtained information about user device resources utilized by the user device and the obtained information about network resources utilized by the user device,

comparing the stored information with recent information about user device resources utilized by the user device and recent information about network resources utilized by the user device;

identifying significant differences between the stored information and the recent information;

obtaining information about applications installed in the user device;

comparing the obtained information about installed applications with the identified significant differences; and

identifying an application installed in the user device, based on the comparison between the obtained installation information and the identified significant differences.

2. The method of claim 1, wherein comparing the obtained information about installed applications with the identified significant differences, comprises aligning the obtained information about installed applications and the identified significant differences, with respect to time.

3. The method according to claim 2, wherein identifying the application installed in the user device comprises identifying features of the obtained information about installed applications and the identified significant differences, coinciding with respect to time.

4. A method for identifying an application installed in a user device of a communication system, the method being performed in a network node of the communication system, the method comprising:

receiving information about applications installed in a user device of the communication system;

receiving information about differences between recent and stored information about resources utilized by the user device;

comparing the received information about differences between recent and stored information about resources utilized by the user device, with the obtained information about applications installed in the user device; and

identifying an application installed in the user device, based on the comparison.

5. The method of claim 4, wherein the information about differences between recent and stored information about resources utilized by the user device comprises information about differences between recent information about user device and network resources utilized by the user device, and stored information about user device and network resources utilized by the user device.

6. The method of claim 4, wherein comparing the received information about differences between recent and stored information about resources utilized by the user device with the obtained information about applications installed in the user device comprises aligning the obtained information about installed applications and the received information about differences, with respect to time.

7. A network node adapted to identify an application installed in a user device of a communication system, the network node comprising:

an interface configured to receive information about applications installed in the user device of the communication system, and to receive information about differences between recent and stored information about resources utilized by the user device; and

a processor configured to be connected to the interface, and to compare the obtained information about applications installed in the user device, with the received information about differences between recent and stored information about resources utilized by the user device, and to identify an application installed in the user device, based on the comparison.

8. The network node of claim 7, where the information about applications installed comprises information about when the applications were installed at the user device.

9. The network node of claim 7, wherein the stored information about resources utilized by the user device comprises a user device profile of utilized resources.

10. The network node of claim 7, wherein the processor is further configured to align the obtained information about installed applications and the identified significant differences, with respect to time.

11. The network node of claim 7, wherein the processor is further configured to use group statistics for obtained information about applications installed in a number of user devices, with the received information about differences between recent and stored information about resources utilized by said number of user devices.

12. The network node of claim 7, wherein the processor is further configured to identify features of the obtained information about installed applications and the identified significant differences, coinciding with respect to time.

13. A method for enabling identification of an application installed in a user device of a communication system, the method being performed in the user device, the user device having access to information about applications installed in the user device, the method comprising:

obtaining information about applications installed in the user device;

monitoring user device resources utilized by the user device; and

sending the information about applications installed in the user device towards a network node of the communication system;

sending information about user device resources utilized by the user device towards the network node of the communication system, for enabling identification of an application based on resources utilized by the user device.

14. A user device for enabling identification of an application installed in the user device of a communication system, the user device comprising:

a memory configured to store information about applications installed in the user device;

a processor configured to be connected to the memory, and configured to monitor user device resources utilized by the user device; and

an interface configured to be connected to the processor, and to send information about applications installed in the user device and information about user device resources utilized by the user device towards the communication system.

15. The user device of claim 14, where the information about applications installed comprises information about when the applications were installed at the user device.