MOBILE DEVICE DATA SECURITY SYSTEM

• US 20170193228A1
• Filed: 01/04/2016
• Published: 07/06/2017
• Est. Priority Date: 01/04/2016
• Status: Active Grant

• Current Assignee: Bank of America Corp.
• Original Assignee: Bank of America Corp.
• Inventors: Jones-McFadden, Alicia C.
• Granted Patent: US 10,002,248 B2
• Time in Patent Office: Days
• CPC Class Codes: G06F 21/554 involving event detection and direct action
• CPC Class Codes: G06F 21/56 Computer malware detection or handling, e.g. anti-virus arrangements
• CPC Class Codes: G06F 21/564 by virus signature recognition

Abstract

Systems, computer program products, and methods are described herein for a mobile device data security system. The present invention is configured to establish a communication link with the mobile device; receive, via the established communication link, information associated with one or more third-party applications stored on the mobile device; initiate a scan, via the established communication link, to determine whether the one or more third-party applications are associated with a malicious code; transmit control signals, via the established communication link, configured to cause the data security application to begin running in the background of the mobile device in response to determining that the one or more third-party applications are associated with the malicious code; and initiate, via the data security application, one or more actions to be executed on the mobile device of the user, wherein the one or more actions limit one or more functionalities of the mobile device.

Claims

1. A mobile device data security system, the system comprising:

at least one non-transitory storage device;

at least one processor; and

at least one module stored in said storage device and comprising instruction code that is executable by the at least one processor and configured to cause said at least one processor to;

provide a data security application for installation on a mobile device of a user;

establish a communication link with the mobile device, wherein establishing further comprises creating a wireless data channel with the mobile device;

receive, via the established communication link, information associated with one or more third-party applications stored on the mobile device;

initiate a scan, via the established communication link, to determine whether the one or more third-party applications are associated with a malicious code;

transmit control signals, via the established communication link, configured to cause the data security application to begin running in the background of the mobile device in response to determining that the one or more third-party applications are associated with the malicious code; and

initiate, via the data security application, one or more actions to be executed on the mobile device of the user based on at least determining that the one or more third-party applications are associated with the malicious code, wherein the one or more actions limit one or more functionalities of the mobile device.

2. The system of claim 1, wherein the module is further configured to cause the at least one processor to:

determine one or more actions to be taken by the user in response to determining that the one or more third-party applications are associated with the malicious code, wherein the one or more actions mitigates one or more effects of the malicious code; and

transmit, via the established communication link, the one or more actions to the user.

3. The system of claim 2, wherein the module is further configured to cause the at least one processor to:

receive an indication that the user has executed the one or more actions;

initiate a scan, via the established communication link, to determine whether the one or more third-party applications continue to be associated with the malicious code;

determine that the one or more third-party applications are not associated with the malicious code; and

restore the one or more functionalities of the mobile device in response to determining that the one or more third-party applications are not associated with the malicious code.

4. The system of claim 1, wherein the module is further configured to cause the at least one processor to determine that the malicious code is associated with tracking the user'"'"'s use of an input device associated with the mobile device.

5. The system of claim 1, wherein the module is further configured to cause the at least one processor to disable user access to the one or more third-party applications in response to determining that the one or more third-party applications are associated with the malicious code.

6. The system of claim 5, wherein the module is further configured to cause the at least one processor to disable user access to one or more features associated with the one or more third-party applications.

7. The system of claim 6, wherein the module is further configured to cause the at least one processor to retrieve one or more user preferences associated with disabling user access, wherein the user preferences indicate one or more specific features associated with the one or more third-party applications to which user access is disabled when a malicious code is detected.

8. The system of claim 6, wherein the module is further configured to cause the at least one processor to:

determine a sensitivity score associated with the one or more third-party applications indicating which of the one or more third-party applications require protection from unauthorized access to safeguard privacy and/or security of the user; and

determine one or more specific features associated with the one or more third-party applications to disable based on at least the sensitivity score associated with the one or more third-party applications.

9. A computerized method for remotely controlling access to a mobile device, the method comprising:

providing, using a computing device processor, a data security application for installation on a mobile device of a user;

establishing, using a computing device processor, a communication link with the mobile device, wherein establishing further comprises creating a wireless data channel with the mobile device;

receiving, via the established communication link, information associated with one or more third-party applications stored on the mobile device;

initiating a scan, via the established communication link, to determine whether the one or more third-party applications are associated with a malicious code;

transmitting control signals, via the established communication link, configured to cause the data security application to begin running in the background of the mobile device in response to determining that the one or more third-party applications are associated with the malicious code; and

initiating, via the data security application, one or more actions to be executed on the mobile device of the user based on at least determining that the one or more third-party applications are associated with the malicious code, wherein the one or more actions limit one or more functionalities of the mobile device.

10. The method of claim 9, wherein the method further comprises:

determining one or more actions to be taken by the user in response to determining that the one or more third-party applications are associated with the malicious code, wherein the one or more actions mitigates one or more effects of the malicious code; and

transmitting, via the established communication link, the one or more actions to the user.

11. The method of claim 10, wherein the method further comprises:

receiving an indication that the user has executed the one or more actions;

initiating a scan, via the established communication link, to determine whether the one or more third-party applications continue to be associated with the malicious code;

determining that the one or more third-party applications are not associated with the malicious code; and

restore the one or more functionalities of the mobile device in response to determining that the one or more third-party applications are not associated with the malicious code.

12. The method of claim 9, wherein the method further comprises determining that the malicious code is associated with tracking the user'"'"'s use of an input device associated with the mobile device.

13. The method of claim 9, wherein the module is further configured to cause the at least one processor to disable user access to the one or more third-party applications in response to determining that the one or more third-party applications are associated with the malicious code.

14. The method of claim 13, wherein the method further comprises disabling user access to one or more features associated with the one or more third-party applications.

15. The method of claim 14, wherein the method further comprises retrieving one or more user preferences associated with disabling user access, wherein the user preferences indicate one or more specific features associated with the one or more third-party applications to which user access is disabled when a malicious code is detected.

16. The method of claim 14, wherein the method further comprises:

determining a sensitivity score associated with the one or more third-party applications indicating which of the one or more third-party applications require protection from unauthorized access to safeguard privacy and/or security of the user; and

determining one or more specific features associated with the one or more third-party applications to disable based on at least the sensitivity score associated with the one or more third-party applications.

17. A computer program product for mobile device data security system, the computer program product comprising a non-transitory computer-readable medium comprising code causing a first apparatus to:

provide a data security application for installation on a mobile device of a user;

establish a communication link with the mobile device, wherein establishing further comprises creating a wireless data channel with the mobile device;

receive, via the established communication link, information associated with one or more third-party applications stored on the mobile device;

initiate a scan, via the established communication link, to determine whether the one or more third-party applications are associated with a malicious code;

transmit control signals, via the established communication link, configured to cause the data security application to begin running in the background of the mobile device in response to determining that the one or more third-party applications are associated with the malicious code; and

initiate, via the data security application, one or more actions to be executed on the mobile device of the user based on at least determining that the one or more third-party applications are associated with the malicious code, wherein the one or more actions limit one or more functionalities of the mobile device.

18. The computer program product of claim 17, wherein the first apparatus is further configured to cause the at least one processor to:

determine one or more actions to be taken by the user in response to determining that the one or more third-party applications are associated with the malicious code, wherein the one or more actions mitigates one or more effects of the malicious code; and

transmit, via the established communication link, the one or more actions to the user.

19. The computer program product of claim 17, wherein the first apparatus is further configured to cause the at least one processor to:

receive an indication that the user has executed the one or more actions;

initiate a scan, via the established communication link, to determine whether the one or more third-party applications continue to be associated with the malicious code;

determine that the one or more third-party applications are not associated with the malicious code; and

restore the one or more functionalities of the mobile device in response to determining that the one or more third-party applications are not associated with the malicious code.

20. The computer program product of claim 18, wherein the first apparatus is further configured to cause the at least one processor to determine that the malicious code is associated with tracking the user'"'"'s use of an input device associated with the mobile device.