PROACTIVE SECURITY FOR MOBILE DEVICES

• US 20160205556A1
• Filed: 01/13/2016
• Published: 07/14/2016
• Est. Priority Date: 12/14/2009
• Status: Active Grant

• Current Assignee: Apple Inc.
• Original Assignee: Apple Inc.
• Inventors: Borghei, Hooman
• Granted Patent: US 10,129,756 B2
• Time in Patent Office: Days
• US Class Current: 1/1
• CPC Class Codes: H04M 1/673 the user being required to key in a code
• CPC Class Codes: H04M 1/72403 with means for local support of applications that increase the functionality
• CPC Class Codes: H04M 1/72457 according to geographic location
• CPC Class Codes: H04M 1/72463 to restrict the functionality of the device
• CPC Class Codes: H04M 1/724631 by limiting the access to the user interface, e.g. locking a touch-screen or a keypad
• CPC Class Codes: H04M 3/42221 Conversation recording systems at the subscriber's set H04M1/656
• CPC Class Codes: H04W 12/08 Access security
• CPC Class Codes: H04W 12/12 Detection or prevention of fraud
• CPC Class Codes: H04W 12/126 Anti-theft arrangements, e.g. protection against subscriber identity module [SIM] cloning
• CPC Class Codes: H04W 4/14 Short messaging services, e.g. short message services [SMS] or unstructured supplementary service data [USSD]

Abstract

Methods, program products, and systems for proactively securing mobile devices are described. A mobile device can proactively determine whether the mobile device is associated with a security risk and the level of the security risk. Upon determining a security risk, the mobile device can transmit coordinates of its current geographic location to a server. To protect privacy of authorized users, the transmission can be disabled by entering a password. If multiple failed password attempts are detected, the mobile device can proactively increase a security level of the device, and selectively protect files or other content stored on the mobile device. In some implementations, the mobile device can be transitioned into a surveillance mode where the mobile device records or captures information associated with one or more of user actions, ambient sound, images, a trajectory of the device, and transmits the recorded or captured information to the network resource.

Claims

1. A method executed by a mobile device, the method comprising:

detecting a security event;

evaluating a risk factor of the security event;

performing at least one security act, including sending a security alert to a server, the security alert identifying a current security status of the mobile device and a description of the security event; and

setting the mobile device to a secure mode of operation, including selectively protecting information from being accessed according to an information protection scheme and the risk factor.

2. The method of claim 1, wherein performing the security act further includes:

displaying a security warning on the mobile device indicating the mobile device will be operating under the secure mode;

creating at least one simulated password on the mobile device;

receiving a login request that includes the simulated password;

submitting location information of the mobile device to the server; and

disabling user applications on the mobile device.

3. The method of claim 1, wherein performing the security act further includes:

displaying a security warning on the mobile device indicating the mobile device will be operating under the secure mode;

recording user actions on the mobile device; and

transmitting the recorded user actions to the server.

4. The method of claim 3, wherein recording the user actions comprises recording a telephone call, and includes:

displaying a reminder that telephone numbers dialed and audio conversations will be recorded;

recording a phone number dialed after the reminder has been displayed; and

recording audio conversations of the telephone call.

5. The method of claim 1, wherein performing the security act further includes:

displaying a security warning on the mobile device indicating the mobile device will be operating under the secure mode; and

after displaying the security warning;

capturing visual images using a digital camera of the mobile device; and

transmitting the captured visual image to the server.

6. The method of claim 1, where the security act further comprises:

display a security warning on the mobile device, the security warning including a current location of the mobile device and contact information of a user of the mobile device.

7. The method of claim 1, where calculating the risk factor includes:

determining that a number of failed password attempts has exceeded a security threshold;

determining that at least some of the attempted passwords are included in a password list; and

determining the risk factor including evaluating a risk of security breach based on the number of password attempts or the password list.

8. A mobile device, comprising:

a processor configured to cause the mobile device to carry out steps that include;

detecting a security event;

evaluating a risk factor of the security event;

performing at least one security act, including sending a security alert to a server, the security alert identifying a current security status of the mobile device and a description of the security event; and

setting the mobile device to a secure mode of operation, including selectively protecting information from being accessed according to an information protection scheme and the risk factor.

9. The mobile device of claim 8, wherein performing the security act further includes:

displaying a security warning on the mobile device indicating the mobile device will be operating under the secure mode;

creating at least one simulated password on the mobile device;

receiving a login request that includes the simulated password;

submitting location information of the mobile device to the server; and

disabling user applications on the mobile device.

10. The mobile device of claim 8, wherein performing the security act further includes:

displaying a security warning on the mobile device indicating the mobile device will be operating under the secure mode;

recording user actions on the mobile device; and

transmitting the recorded user actions to the server.

11. The mobile device of claim 10, wherein recording the user actions comprises recording a telephone call, including:

displaying a reminder that telephone numbers dialed and audio conversations will be recorded;

recording a phone number dialed after the reminder has been displayed; and

recording audio conversations of the telephone call.

12. The mobile device of claim 8, wherein performing the security act further includes:

displaying a security warning on the mobile device indicating the mobile device will be operating under the secure mode; and

after displaying the security warning;

capturing visual images using a digital camera of the mobile device; and

transmitting the captured visual image to the server.

13. The mobile device of claim 8, where calculating the risk factor includes:

determining that a number of failed password attempts has exceeded a security threshold;

determining that at least some of the attempted passwords are included in a password list; and

determining the risk factor including evaluating a risk of security breach based on the number of password attempts or the password list.

14. A non-transitory computer readable storage medium configured to store instructions that, when executed by a processor included in a mobile device, cause the mobile device to carry out steps that include:

detecting a security event;

evaluating a risk factor of the security event;

performing at least one security act, including sending a security alert to a server, the security alert identifying a current security status of the mobile device and a description of the security event; and

setting the mobile device to a secure mode of operation, including selectively protecting information from being accessed according to an information protection scheme and the risk factor.

15. The non-transitory computer readable storage medium of claim 14, wherein performing the security act further includes:

displaying a security warning on the mobile device indicating the mobile device will be operating under the secure mode;

creating at least one simulated password on the mobile device;

receiving a login request that includes the simulated password;

submitting location information of the mobile device to the server; and

disabling user applications on the mobile device.

16. The non-transitory computer readable storage medium of claim 14, wherein performing the security act further includes:

displaying a security warning on the mobile device indicating the mobile device will be operating under the secure mode;

recording user actions on the mobile device; and

transmitting the recorded user actions to the server.

17. The non-transitory computer readable storage medium of claim 14, wherein recording the user actions comprises recording a telephone call, including:

displaying a reminder that telephone numbers dialed and audio conversations will be recorded;

recording a phone number dialed after the reminder has been displayed; and

recording audio conversations of the telephone call.

18. The non-transitory computer readable storage medium of claim 14, wherein performing the security act further includes:

displaying a security warning on the mobile device indicating the mobile device will be operating under the secure mode; and

after displaying the security warning;

capturing visual images using a digital camera of the mobile device; and

transmitting the captured visual image to the server.

19. The non-transitory computer readable storage medium of claim 14, where the security act further comprises:

display a security warning on the mobile device, the security warning including a current location of the mobile device and contact information of a user of the mobile device.

20. The non-transitory computer readable storage medium of claim 14, where calculating the risk factor includes:

determining that a number of failed password attempts has exceeded a security threshold;

determining that at least some of the attempted passwords are included in a password list; and

determining the risk factor including evaluating a risk of security breach based on the number of password attempts or the password list.