SECURITY STATUS AND INFORMATION DISPLAY SYSTEM

• US 20140373162A1
• Filed: 08/29/2014
• Published: 12/18/2014
• Est. Priority Date: 10/21/2008
• Status: Active Grant

• Current Assignee: Lookout Incorporated
• Original Assignee: Lookout Incorporated
• Inventors: Mahaffey, Kevin, Hering, John G., Burgess, James
• Granted Patent: US 9,245,119 B2
• Time in Patent Office: Days
• US Class Current: 726/25
• CPC Class Codes: G06F 21/554 involving event detection and direct action
• CPC Class Codes: G06F 21/577 Assessing vulnerabilities and evaluating computer system security

Abstract

Systems and methods disclosed herein provide a security component on a server that may be in communication with a database containing mobile device security information. The server security component may receive event information regarding a mobile device from a local security component on the mobile device. The event information may be processed by the server to assess the security state of the mobile device by comparing the event information to the mobile device security information. Based on the processing, an assessment of the security state of the mobile device may be output by the server for display.

Claims

1. A method comprising:

receiving, by a server having a security component in communication with a database containing mobile device security information, from a local security component on a mobile communications device, event information including data about at least one event that involved the mobile device;

processing, at the server, the received data to assess a security state of the mobile device by comparing the received data to the stored database; and

outputting, by the server for display, a security state assessment of the mobile device, wherein the security state assessment is based on the processing of the received data by the server.

2. The method of claim 1, wherein the server receives data containing event information regarding a first event that had not been assessed and wherein the processing at the server causes the first event to be assessed as a security problem event.

3. The method of claim 1, wherein the server receives data containing event information regarding a first event that had been assessed by the mobile device as a non-security problem event.

4. The method of claim 3, wherein the processing at the server results in the first event being re-assessed as a security problem event.

5. The method of claim 1, wherein the event information includes information about a network interface event.

6. The method of claim 1, wherein the security state assessment is output by the server to an administrator computer for display.

7. The method of claim 1, wherein the security state assessment output by the server includes an overall security condition of the mobile device.

8. The method of claim 7, wherein the overall security condition of the mobile device is displayed graphically.

9. The method of claim 7, wherein the overall security condition of the mobile device is displayed as a selected security condition from among a set of security conditions.

10. A method comprising:

receiving, by a server having a security component in communication with a database containing mobile device security information, from a local security component on each of a plurality of mobile devices, event information from each of the plurality of mobile devices, the event information including data about at least one event from each of the plurality of mobile devices;

processing, at the server, the received data to assess a security state of each of the plurality of mobile devices by comparing the received data from each of the plurality of mobile devices to the stored database, wherein the assessed security state for each mobile device is either in a secure or an insecure state; and

outputting, by the server to an administrator computer, the security state assessment for at least one of the plurality of mobile devices, wherein the security state assessment is based on the processing of the received data by the server.

11. The method of claim 10, further comprising outputting, by the server to the administrator computer, information about a subset of the plurality of mobile devices that are in a secure state.

12. The method of claim 10, further comprising outputting, by the server to the administrator computer, a status of an individual mobile device from the plurality of mobile devices when the individual mobile device is in an insecure state.

13. A method comprising:

receiving, by a server having a security component in communication with a database containing mobile device security information, from a local security component on a first mobile device, event information including data about at least one event that involved the first mobile device;

processing, at the server, the received data to assess a security state of the first mobile device by comparing the received data to the stored database; and

transmitting, by the server, at least one remediating command to the first mobile device when the assessed security state of the first mobile device indicates a security problem.

14. The method of claim 13, wherein the server receives data containing event information regarding a first event that had not been assessed and wherein the processing at the server results in the first event being assessed as a security problem event.

15. The method of claim 13, wherein the server receives data containing event information regarding a first event that had been assessed by the mobile device as a non-security problem event.

16. The method of claim 13, wherein the processing at the server results in the first event being re-assessed as a security problem event.

17. The method of claim 13, wherein the at least one remediating command is transmitted to the first mobile device to remedy the security problem.

18. The method of claim 13, wherein the at least one remediating command is transmitted to the first mobile communication device to contain the security problem.

19. The method of claim 13, wherein the event information includes information about a network interface event.

20. The method of claim 13, further comprising transmitting, by the server, at least one remediating command to a second mobile device based on the processing of the received data by the server.

21. The method of claim 13, the method further comprising outputting the assessed security state of the first mobile device to an administrator computer.

22. A system, comprising at least one processor and memory, the memory programmed with instructions that when executed cause the at least one processor to:

receive from a local security component on a mobile device, event information comprising data about at least one event that involved the mobile device;

communicate with a database containing mobile device security information;

process the received data to assess a security state of the mobile device by comparing the received data to the stored database; and

output for display a security state assessment of the mobile device, wherein the security state assessment is based on the processed received data.

23. A system, comprising at least one processor and memory, the memory programmed with instructions that when executed cause the at least one processor to:

receive, from a local security component on a first mobile device, event information comprising data about at least one event that involved the first mobile device;

communicate with a database containing mobile device security information;

process the received data to assess a security state of the first mobile device by comparing the received data to the stored database; and

transmit at least one remediating command to the first mobile device when the assessed security state of the first mobile device indicates a security problem.