Method for implementing security update of mobile station and a correlative reacting system

• US 7,933,584 B2
• Filed: 10/13/2006
• Issued: 04/26/2011
• Est. Priority Date: 10/15/2005
• Status: Active Grant

• Current Assignee: Snaptrack Incorporated (Qualcomm, Inc.)
• Original Assignee: Huawei Technologies Co., Ltd. (Huawei Investment & Holding Co., Ltd.)
• Inventors: Wei, Jiwei, Ji, Changfeng, Liu, Shuling, Zheng, Zhibin
• Primary Examiner(s): Afshar; Kamran
• Assistant Examiner(s): SHAHEED, KHALID W
• Application Number:
  US11/580,591
• Publication Number:
  US 20070088948A1
• Time in Patent Office: 1,656 Days
• Field of Search: 713/66, 713/182, 713/201, 455410-411, 455418-420, 455/423, 4554322-4323
• US Class Current: 455/411
• CPC Class Codes: H04L 63/102 Entity profiles
• CPC Class Codes: H04L 63/145 the attack involving the propagation of malware through the network, e.g. viruses, trojans or worms
• CPC Class Codes: H04L 67/34 involving the movement of software or configuration parameters network booting or remote initial program loading [RIPL] G06F9/4416
• CPC Class Codes: H04W 12/08 Access security
• CPC Class Codes: H04W 12/128 Anti-malware arrangements, e.g. protection against SMS fraud or mobile malware
• CPC Class Codes: H04W 12/35 Protecting application or service provisioning, e.g. securing SIM application provisioning
• CPC Class Codes: H04W 8/22 Processing or transfer of terminal data, e.g. status or physical capabilities
• CPC Class Codes: H04W 8/245 from a network towards a terminal

Abstract

A correlative reacting system and a method for implementing security update of mobile station. The correlative reacting system includes a security correlative agent at a terminal side and a security correlative server at a network side communicated with the security correlative agent via an air interface. In the present invention, the correlative reacting system performs an information interaction with the mobile station, controls the mobile station to carry out an automatic security update. The automatic security update includes automatic downloading and installation, update of the security correlative agent, and automatic recovery of the insecurity factors of the mobile station and the like.

Claims

1. A correlative reacting system, performing an information

interaction with a mobile station, and comprising:

a security correlative server;

a network access controller; and

an application service controller connected with the security correlative server, wherein the network access controller or the security correlative server is adapted to;

send to the mobile station a security correlative agent probe request containing initialization configuration information of a security correlative agent for collecting and reporting security correlative information of the mobile station, to determine whether the mobile station needs to install the security correlative agent; and

if a number of sent security correlative agent probe requests is greater than a threshold for sending the security correlative agent probe request, the security correlative server determines that it is necessary to install the security correlative agent in the mobile device.

2. The system according to claim 1, wherein the network access controller is adapted to send a mobile station connect report to the security correlative server.

3. The system according to claim 1, further comprising a security correlative agent downloading server which is adapted to provide the mobile station with a service for downloading the security correlative agent after the network access controller redirects a data service request of the mobile station.

4. The system according to claim 1, wherein the security correlative agent is located on a terminal side which is adapted to extract and save the initialization configuration information contained in the security correlative agent probe request and to return a security correlative agent probe response to the network access controller or the security correlative server.

5. The system according to claim 4, wherein the network access controller is adapted to receive a mobile station connect response sent by the security correlative server on determination that the mobile station needs to install the security correlative agent.

6. The system according to claim 1, wherein the security correlative agent is located at a terminal side which is adapted to collect security correlative information of the mobile station and report the security correlative information of the mobile station to the security correlative server of the correlative reacting system;

and

the security correlative server is adapted to analyze the security correlative information reported by the security correlative agent, and return a security correlative information response to the security correlative agent as required.

7. The system according to claim 6, wherein the network access controller and the application service controller are adapted to receive a security control policy update request delivered by the security correlative server when the security correlative server determines that the mobile station needs to install a security correlative agent according to an analysis result, and to return a security control policy update response to the security correlative server to notify the security correlative server an update result of the security control policy of the mobile station.

8. The system according to claim 4, further comprising a security condition report or a security prompt information generation unit, which is adapted to generate the security condition report or security prompt information of the mobile station according to the collected security correlative information of the mobile station and the security correlative information response returned by the security correlative server;

the security condition report or security prompt information generation unit is in the security correlative agent.

9. The system according to claim 4, further comprising an update unit which is adapted to update a security application software or an operating system of the mobile station according to the security correlative information response returned by the security correlative server;

the update unit is in the security correlative agent.

10. A correlative reacting system, comprising:

a security correlative server;

a network side; and

a mobile station, wherein the network side comprises a first message sending and receiving module and a judgment module, the first message sending and receiving module being configured to send a security correlative agent probe request to the mobile station, and receive a probe response sent by the mobile station, and the judgment module is adapted to judge whether the mobile station needs to install a security correlative agent for collecting and reporting security correlative information of the mobile station according to the probe response; and

the mobile station comprises a second message sending and receiving module which is adapted to receive the security correlative agent probe request and send the probe response to the network side;

if a number of sent security correlative agent probe requests is greater than a threshold for sending the security correlative agent probe request, the security correlative server determines that it is necessary to install the security correlative agent in the mobile device.

11. The system according to claim 10, wherein the mobile station further comprises a downloading and installation module which is adapted to download and install a security correlative agent when the judgment module determines that the mobile station needs to install the security correlative agent.

12. A method for implementing a security update of a mobile station, comprising:

sending, from a network access controller or a security correlative server of a correlative reacting system, to the mobile station, a security correlative agent probe request;

if a number of sent security correlative agent probe requests is greater than a threshold for sending the security correlative agent probe request, the security correlative server determines that it is necessary to install the security correlative agent in the mobile device;

the network side triggering the mobile station to start downloading and installation of the security correlative agent; and

downloading and installing the security correlative agent into the mobile station.

13. The method according to claim 12, wherein when the mobile station does not respond to the security correlative agent probe request the network side does not receive a probe response from the mobile station within a preset time, or the times of sending the security correlative agent probe request by the network side exceed a preset threshold.

14. The method according to claim 12, further comprising:

when the security correlative agent is installed in the mobile station and operates normally, extracting and saving, by the security correlative agent, initialization configuration information contained in the security correlative agent probe request and returning a security correlative agent probe response to the network side.

15. The method according to claim 14, wherein the security correlative agent probe response comprises notification information notifying that there is no need for the mobile station to install the security correlative agent, and information of an identity and/or an IP address of the security correlative agent.

16. The method according to claim 12, wherein, before the step of sending, from a network side comprising a network access controller or a security correlative server of a correlative reacting system, to the mobile station a security correlative agent probe request, the method further comprises:

the network access controller of the correlative reacting system sending a mobile station connect report to the security correlative server.

17. The method according to claim 12, wherein when determining that the mobile station needs to install a security correlative agent, the security correlative server sends a mobile station connect response to the network access controller to notify the network access controller that the mobile station needs to install the security correlative agent.

18. The method according to claim 12, wherein the step of downloading and installing the security correlative agent into the mobile station comprises:

receiving, by the network access controller of the correlative reacting system, a data service request from the mobile station, and redirecting, by the network access controller of the correlative reacting system, the data service request to an address for downloading the security correlative agent; and

downloading and installing, by the mobile station, the corresponding security correlative agent according to the address for downloading the security correlative agent.

19. The method according to claim 18, wherein upon receiving by the network access controller of the correlative reacting system a data service request from the mobile station, if the mobile station has not finished the downloading of the security correlative agent or the network access controller does not know that the mobile station needs to install the security correlative agent, the network access controller performs a security processing on the data service request of the mobile station.

20. The method according to claim 12, wherein a destination address of the security correlative agent probe request is an IP unicast address or multicast address of the mobile station;

the initialization configuration information comprises an IP address or a service port of the security correlative server.

21. A method for implementing a security update of a mobile station, comprising:

a security correlative agent of a correlative reacting system at a terminal side collecting security correlative information of the mobile station and reporting the security correlative information of the mobile station to a security correlative server of the correlative reacting system; and

the security correlative server sending a security correlative agent probe request and analyzing the security correlative information reported by the security correlative agent, and returning a security correlative information response to the security correlative agent to provide security control information;

if a number of sent security correlative agent probe requests is greater than a threshold for sending the security correlative agent probe request, the security correlative server determines that it is necessary to install the security correlative agent in the mobile device.

22. The method according to claim 21, wherein the step of the security correlative agent of the correlative reacting system at the terminal side collecting the security correlative information of the mobile station comprises:

the security correlative agent collecting the security correlative information of the mobile station via a software interface of the mobile station;

the security correlative agent arranging the security correlative information, selecting information content to be reported to the security correlative server; and

the step of reporting security correlative information of the mobile station to the security correlative server of the correlative reacting system comprises;

the security correlative agent sending a security correlative information report containing the selected information content to the security correlative server via a secure information transmission channel between the security correlative server and the security correlative agent.

23. The method according to claim 21, wherein the step of the security correlative server analyzing the security correlative information reported by the security correlative agent and returning a security correlative information response to the security correlative agent as required comprises:

the security correlative server checking the validity of the security correlative information reported by the security correlative agent, performing a correlation analysis on the security correlative information, and updating the locally stored security correlative information of the mobile station according to a result of the correlation analysis; and

the security correlative server returning a security correlative information response to the security correlative agent via a secure information transmission channel between the security correlative server and the security correlative agent according to the result of the correlation analysis, wherein the security correlative information response comprises security control information and an evaluation result of security level of the mobile station fed back by the security correlative server to the security correlative agent.

24. The method according to claim 21, further comprising:

the security correlative agent saving latest security correlative information of the mobile station, content of security correlative information report and policy of security correlative information report.

25. The method according to claim 21, further comprising:

the security correlative agent generating a security condition report or security prompt information of the mobile station according to the collected security correlative information of the mobile station and the security correlative information response returned by the security correlative server.

26. The method according to claim 21, further comprising:

the security correlative agent updating a security application software of the mobile station or making a patch to the operating system/platform according to the security correlative information response returned by the security correlative server.

27. A method for implementing a security update of a mobile station, comprising:

a security correlative agent of a correlative reacting system at a terminal side collecting security correlative information of the mobile station and reporting the security correlative information of the mobile station to a security correlative server of the correlative reacting system;

the security correlative server sending a security correlative agent probe request and analyzing the security correlative information reported by the security correlative agent, and returning control information to the security correlative agent when an insecurity factor is present in the mobile station; and

the security correlative agent assisting the mobile station in fixing the insecurity factor according to the control information;

if a number of sent security correlative agent probe requests is greater than a threshold for sending the security correlative agent probe request, the security correlative server determines that it is necessary to install the security correlative agent in the mobile device.

28. The method according to claim 27, wherein the step of assisting the mobile station in fixing the insecurity factor according to the control information is implemented in a period preset by the network side.

29. A method for implementing a security update of a mobile station, comprising:

a security correlative agent of a correlative reacting system at a terminal side collecting security correlative information of the mobile station and reporting the security correlative information of the mobile station to a security correlative server of the correlative reacting system;

the security correlative server sending a security correlative agent probe request and analyzing the security correlative information reported by the security correlative agent, and returning control information to the security correlative agent; and

the mobile station downloading a software to implement an automatic update of the security correlative agent according to the control information;

if a number of sent security correlative agent probe requests is greater than a threshold for sending the security correlative agent probe request, the security correlative server determines that it is necessary to install the security correlative agent in the mobile device.

30. The method according to claim 29, further comprising:

when the automatic update of the security correlative agent results in a limitation of a user'"'"'s service, the security correlative agent notifies the user of the service limitation.

31. A method for implementing a security update of a mobile station, comprising:

sending a security correlative agent probe request to the mobile station from a security correlative server;

if a number of sent security correlative agent probe requests is greater than a threshold for sending the security correlative agent probe request, the security correlative server determines that it is necessary to install the security correlative agent in the mobile device, and

triggering the mobile station to start downloading and installation of the security correlative agent to implement a security update.