Enterprise-wide security system for computer devices

• US 7,669,237 B2
• Filed: 08/27/2003
• Issued: 02/23/2010
• Est. Priority Date: 08/27/2002
• Status: Expired due to Term

• Current Assignee: Digital Trust Incorporated, Musarubra US LLC (Musarubra US SellCo LLC)
• Original Assignee: Digital Trust Incorporated
• Inventors: Shahbazi, Majid
• Primary Examiner(s): Barron, Jr.; Gilberto
• Assistant Examiner(s): Nobahar; Abdulhakim
• Application Number:
  US10/527,235
• Publication Number:
  US 20060112427A1
• Time in Patent Office: 2,372 Days
• Field of Search: 726 1- 4, 726 11- 14, 726/17, 726/22, 726/25, 726/26, 713/151, 713/152, 713/165, 713/167, 713/182, 709223-225, 709/229, 707/1, 707/10
• US Class Current: 726/22
• CPC Class Codes: G06F 21/50 Monitoring users, programs or devices to maintain the integrity of platforms, e.g. of processors, firmware or operating systems
• CPC Class Codes: G06F 21/55 Detecting local intrusion or implementing counter-measures
• CPC Class Codes: G06F 21/577 Assessing vulnerabilities and evaluating computer system security
• CPC Class Codes: G06F 21/606 by securing the transmission between two devices or processes
• CPC Class Codes: G06F 21/6218 to a system of files or objects, e.g. local or distributed file system or database
• CPC Class Codes: G06F 2221/2111 Location-sensitive, e.g. geographical location, GPS
• CPC Class Codes: G06F 2221/2137 Time limited access, e.g. to a computer or data
• CPC Class Codes: H04L 63/1408 by monitoring network traffic monitoring network traffic per se H04L43/00
• CPC Class Codes: H04L 63/20 for managing network security; network security policies in general filtering policies H04L63/0227
• CPC Class Codes: H04W 12/02 Protecting privacy or anonymity, e.g. protecting personally identifiable information [PII]
• CPC Class Codes: H04W 12/03 Protecting confidentiality, e.g. by encryption
• CPC Class Codes: H04W 12/084 using delegated authorisation, e.g. open authorisation [OAuth] protocol
• CPC Class Codes: H04W 12/086 using security domains

Abstract

A system and method for securing data in mobile devices includes a computing node and a plurality of mobile devices. A node security program executed in the computing node interfaces with a device security program executed at a mobile device. The computing node is responsible for managing the security based on a node security profile interpreted by a node security program executed in the computing node. A device discovery method and arrangement also detects and locates various information about the mobile devices based on a scan profile.

Claims

1. A method for managing a computer system on a network, the computer system including a computing node located on the network side of a network connection on the network and one or more mobile devices located on a user'"'"'s side of the network connection on the network, comprising:

running a discovery program on the network side of the network connection, the discovery program comprising;

scanning the network based on a scan profile defining at least one parameter for connecting to at least one of domains, computing nodes, and mobile devices;

detecting at least one domain on the network in accordance with the parameters defined in the scan profile,

detecting at least one computing node within the detected domain in accordance with the parameters defined in the scan profile, and

connecting to at least one of the detected computing nodes in accordance with the parameters defined in the scan profile,

detecting, using the discovery program, one or more mobile devices connected to the detected computing node;

detecting, using the discovery program, one or more mobile devices that were previously, but are not currently, connected to the detected computing node;

determining information regarding at least one of the detected mobile devices based on at least one of a registry resource, a file resource, a process resource, a network management parameter, a data format, a packet format, a synchronization log entry, a directory structure, a database entry, the presence of an executable program and attributes associated with a mobile device or resource; and

using the determined mobile device information to manage security of the computer system from the network side of the network connection.

2. The method of claim 1, wherein the discovery program is run in at least one of a remote central station or a local computing node.

3. The method of claim 1 further including grouping the detected mobile devices or resources by type and other attribute.

4. The method of claim 1, wherein the scan profile contains information regarding at least one of network, domain, IP address, netmask, and computer identity to be scanned, time of synchronization and device connection.

5. The method of claim 1, wherein the scan profile contains information regarding at least one of network, domain, IP address, netmask, and computer identity not to be scanned.

6. The method of claim 1, wherein the results of scanning are analyzed and populated and stored and displayed to the users.

7. The method of claim 1, wherein the determined mobile device information includes at least one of device type, device identity, synchronization software type, synchronization software availability, synchronization software location, synchronization software version number, previous synchronization information, data and time of last synchronization, the type of device used during previous synchronization, synchronization ID, device owner information, type of applications and files installed or used on the mobile device, file size, file name, file attribute, manufacturer information, time of all completed and incomplete synchronization and data access and connections performed, type of data and information transferred to and from a mobile device and a resource.

8. The method of claim 1, further comprising at least one of locking and denying access to an unauthorized mobile device attempting to access the computer system.

9. The method of claim 1, further comprising a step of locking an authorized mobile device attempting to access the network.

10. The method of claim 9, wherein the locking step comprises transmitting security software to the mobile device.

11. The method of claim 1, wherein the step of running the discovery program results in detection of at least one of a device type, connection profile, or location of at least one of the mobile devices and resource devices.