Methods and apparatus for determining device integrity

• US 6,973,305 B2
• Filed: 09/10/2003
• Issued: 12/06/2005
• Est. Priority Date: 09/10/2003
• Status: Active Grant

• Current Assignee: Qualcomm, Inc.
• Original Assignee: Qualcomm, Inc.
• Inventors: McLean, Ivan Hugh
• Primary Examiner(s): Urban, Edward F.
• Assistant Examiner(s): Jackson, Blane J.
• Application Number:
  US10/659,847
• Publication Number:
  US 20050059352A1
• Time in Patent Office: 818 Days
• Field of Search: 455/423, 455/425, 455/67.11, 455/115.1, 455/419
• US Class Current: 455/425
• CPC Class Codes: G06F 21/305 by remotely controlling device operation
• CPC Class Codes: G06F 21/316 by observing the pattern of computer usage, e.g. typical user behaviour
• CPC Class Codes: G06F 21/52 during program execution, e.g. stack integrity ; Preventing unwanted data erasure; Buffer overflow
• CPC Class Codes: G06F 21/552 involving long-term monitoring or reporting
• CPC Class Codes: G06F 21/565 by checking file integrity
• CPC Class Codes: G06F 2221/2103 Challenge-response
• CPC Class Codes: H04L 63/12 Applying verification of the received information cryptographic mechanisms or cryptographic arrangements for data integrity or data verification H04L9/32
• CPC Class Codes: H04W 12/104 Location integrity, e.g. secure geotagging
• CPC Class Codes: H04W 88/00 Devices specially adapted for wireless communication networks, e.g. terminals, base stations or access point devices

Abstract

Methods and apparatus for determining the integrity of a device. A method is provided for use in a server to provide a dynamic integrity check of a client device. The method includes selecting a selected integrity application from one or more integrity applications, wherein the selected integrity application operates to generate a unique preselected integrity response. The method also includes downloading the selected integrity application for execution on the client device, and receiving a response from the selected integrity application. The method also includes determining whether or not the response is the preselected integrity response.

Claims

1. A method for use in a server to provide a dynamic integrity check of a client device, the method comprising:

selecting a selected integrity application from one or more integrity applications, wherein the selected integrity application comprises a predefined integrity response;

downloading the selected integrity application for execution on the client device;

receiving a response based on integrity checking of the predefined selected integrity application on the client device; and

determining a match of at least whether or not the response comprises the preselected integrity response.

2. The method of claim 1, further comprising dynamically adjusting the predefined integrity response to include a reference value.

3. The method of claim 2, wherein the reference value comprises at least one of a time-based reference value, a date-based reference value, and a digital signature.

4. The method of claim 1, wherein the response comprises the absence of any response within a selectable time period.

5. The method of claim 1, wherein the step of selecting comprises randomly selecting the selected integrity application from the one or more integrity applications.

6. The method of claim 1, wherein the step of selecting comprises selecting the selected integrity application from the one or more integrity applications based on at least one of a device location, a type of hardware, a carrier identification, a behavior associated with the client device, a time, a random indicator, a periodic indicator.

7. The method of claim 1, wherein the client device is a wireless device.

8. The method of claim 1, further comprising dynamically changing at least one of the selection of the selected integrity application and the predefined integrity response prior to downloading the selected integrity application for execution on the client device.

9. Apparatus for providing a dynamic integrity check of a device, the apparatus comprising:

selection logic that operates to select a selected integrity application from one or more integrity applications, wherein the selected integrity application comprises a predefined integrity response;

transmitting logic that operates to download the selected integrity application for execution on the device;

receiving logic that operates to receive a response based on integrity checking of the predefined selected integrity application on the client device; and

determining a match of at least a portion logic that operates to determine whether or not the response comprises the preselected integrity response.

10. The apparatus of claim 9, further comprising logic to dynamically adjust the predefined integrity response to include a reference value.

11. The apparatus of claim 10, wherein the reference value comprise at least one of a time-based reference value, a date-based reference value, and a digital signature.

12. The apparatus of claim 9, wherein the device is a wireless device.

13. The apparatus of claim 9, further comprising logic for dynamically changing at least one of the selection of the selected integrity application and the predefined integrity response prior to downloading the selected integrity application for execution on the client device.

14. Apparatus that operates to provide a dynamic integrity check of a device, the apparatus comprising:

means for selecting a selected integrity application from one or more integrity applications, wherein the selected integrity application comprises a predefined integrity response;

means for downloading the selected integrity application for execution on the device;

means for receiving a response based on integrity checking of the predefined selected integrity application on the client device; and

means for determining a match of at least whether or not the response comprises the preselected integrity response.

15. The apparatus of claim 14, further comprising means for dynamically adjusting the predefined integrity response to include a reference value.

16. The apparatus of claim 15, wherein the reference value comprises at least one of a time-based reference value, a date-based reference value, and a digital signature a time-based value.

17. The apparatus of claim 14, wherein the device is a wireless device.

18. The apparatus of claim 14, further comprising means for dynamically changing at least one of the selection of the selected integrity application and the predefined integrity response prior to downloading the selected integrity application for execution on the client device.

19. A computer-readable media comprising instructions that when executed by a processor in an integrity system operate to dynamically check the integrity of a device, the computer-readable media comprising:

instructions for selecting a selected integrity application from one or more integrity applications, wherein the selected integrity application comprises a predefined integrity response;

instructions for downloading the selected integrity application for execution on the device;

instructions for receiving a response based on integrity checking of the predefined selected integrity application one the client device; and

instructions for determining a match of at least a portion whether or not the response comprises the preseleted integrity response.

20. The computer-readable media of claim 19, further comprising instructions for dynamically adjusting the predefined integrity response to include a reference value.

21. The computer readable media of claim 20, wherein the reference value comprises at least one of a time-based reference value, a date-based reference value, and a digital signature a time-based value.

22. The computer-readable media of claim 19, wherein the device is a wireless device.

23. The computer-readable media of claim 19, further comprising instructions for dynamically changing at least one of the selection of the selected integrity application and the predefined integrity response prior to downloading the selected integrity application for execution on the client device.