Electronic device security and tracking system and method

• US 8,506,649 B2
• Filed: 07/11/2006
• Issued: 08/13/2013
• Est. Priority Date: 08/23/2003
• Status: Active Grant

• Current Assignee: Softex LLC (FIG LLC (d/b/a Fortress Investment Group LLC))
• Original Assignee: Softex Incorporated
• Inventors: Bhansali, Apurva Mahendrakumar, Jain, Manoj Kumar, Dube, Shradha, Rangarajan, Gayathri, Patel, Mehul Ramjibhai, Raikar, Rayesh Kashinath, Dhanani, Kamal Mansukhlal, Kapila, Ranjit, Varghese, Elza Abraham, Tucker, Thomas David
• Primary Examiner(s): Orgad, Edan
• Assistant Examiner(s): Tolentino, Roderick
• Application Number:
  US11/484,100
• Publication Number:
  US 20060253904A1
• Time in Patent Office: 2,590 Days
• Field of Search: 726/34, 726/35, 713/162, 713/189, 379 37- 51, 380270-273
• US Class Current: 726/35
• CPC Class Codes: G06F 21/572 Secure firmware programming, e.g. of basic input output system [BIOS]
• CPC Class Codes: G06F 21/88 Detecting or preventing theft or loss
• CPC Class Codes: G06Q 20/3674 involving authentication
• CPC Class Codes: H04W 12/082 using revocation of authorisation
• CPC Class Codes: H04W 12/126 Anti-theft arrangements, e.g. protection against subscriber identity module [SIM] cloning

Abstract

A system and method for securing and tracking an electronic device. The system includes hardware, software and firmware components that cooperate to allow tracking, disabling, and other interaction with the stolen electronic device. The system includes an application component, non-viewable component and Basic Input/Output Subsystem (BIOS) component that are present on the electronic device. The BIOS component maintains the secured environment of the application and non-viewable components. If only the application component was provided, a simple low level format of the hard disk drive would remove the application and bypass the security features. The system implements an “application and BIOS” based solution to electronic device security.

Claims

1. A mobile electronic device, comprising:

a processor;

one or more non-transitory machine-readable storage media responsive to the processor; and

a security application in at least one of the non-transitory machine-readable storage media, wherein the security application is operable to perform operations comprising;

enabling an owner of the mobile electronic device to register the mobile electronic device with a security service residing at least partially on one or more servers;

causing the mobile electronic device to automatically send identifying information for the mobile electronic device to the security service;

after the owner has registered the mobile electronic device with the security service, causing the mobile electronic device to periodically communicate with the security service, when the mobile electronic device is in a state other than a state in which the mobile electronic device is powered off;

after the owner has registered the mobile electronic device with the security service, accepting a notification at the mobile electronic device from the security service, wherein the notification comprises a message indicating that the owner of the mobile electronic device has reported a loss or requested disabling of the mobile electronic device;

in response to receiving the notification, automatically disabling at least one user function of the mobile electronic device while still allowing the mobile electronic device to communicate with the security service; and

automatically causing at least some user data to be copied from the mobile electronic device to at least one of the servers;

wherein the one or more non-transitory machine-readable storage media comprises non-volatile memory;

wherein the non-volatile memory comprises a changeable area that can be modified by a user and a system area that cannot be modified by the user;

wherein the security application utilizes code residing at least partially in the system area; and

wherein the security application receives the notification from at least one of the servers via the system area.

2. A mobile electronic device according to claim 1, wherein the notification includes no third-party certification.

3. A mobile electronic device according to claim 1, wherein the operation of enabling the owner to register the mobile electronic device with the security service comprises providing the security service with at least three items from the group consisting of:

a phone number for the mobile electronic device, a phone service provider for the mobile electronic device, an International Mobile Equipment Identifier (IMEI) number for the mobile electronic device, and a phone description for the mobile electronic device.

4. A mobile phen electronic device according to claim 3, wherein the identifying information automatically sent from the mobile electronic device to the security service comprises:

a phone number for the mobile electronic device;

an international mobile equipment identifier (IMEI) number for the mobile electronic device; and

a model number for the mobile electronic device.

5. A mobile electronic device according to claim 3, wherein the identifying information automatically sent from the mobile electronic device to the security service comprises:

a phone number for the mobile electronic device; and

an international mobile equipment identifier (IMEI) number for the mobile electronic device.

6. A mobile electronic device according to claim 1, wherein:

the system area comprises a short messaging service (SMS) component;

the notification comprises a message in an SMS format; and

the security application receives the notification from at least one of the servers via the SMS component.

7. A mobile electronic device according to claim 1, wherein the operations the security application is operable to perform further comprise:

after the at least some user data has been copied from the mobile electronic device to at least one of the servers, causing at least some of the user data to be deleted from the mobile electronic device.

8. A mobile electronic device according to claim 7, wherein the operations the security application is operable to perform further comprise:

after the at least some of the user data has been deleted from the mobile electronic device, causing at least some of the user data to be copied from at least one of the servers to the mobile electronic device.

9. A method for providing security for a mobile electronic device, the method comprising:

receiving, at a mobile electronic device, a request from an owner of the mobile electronic device to register the mobile electronic device with a security service residing at least partially on one or more servers;

in response to the request from the owner, registering the mobile electronic device with the security service;

automatically sending identifying information for the mobile electronic device from the mobile electronic device to the security service;

after the owner has registered the mobile electronic device with the security service, periodically communicating with the security service, when the mobile electronic device is in a state other than a state in which the mobile electronic device is powered off;

after the owner has registered the mobile electronic device with the security service, accepting a notification from the security service, wherein the notification comprises a message indicating that the owner of the mobile electronic device has reported a loss or requested disabling of the mobile electronic device;

in response to accepting the notification, automatically disabling at least one user function of the mobile electronic device while still allowing the mobile electronic device to communicate with the security service; and

automatically causing at least some user data to be copied from the mobile electronic device to at least one of the servers;

wherein the mobile electronic device comprises non-volatile memory;

wherein the non-volatile memory comprises a changeable area that can be modified by a user and a system area that cannot be modified by the user;

wherein the security application utilizes code residing at least partially in the system area; and

wherein the operation of accepting the notification from the security service comprises receiving the notification from at least one of the servers via the system area.

10. A method according to claim 9, wherein the notification includes no third-party certification.

11. A method according to claim 9, wherein the operation of registering the mobile electronic device with the security service comprises:

providing the security service with at least three items from the group consisting of;

a phone number for the mobile electronic device, a phone service provider for the mobile electronic device, an International Mobile Equipment Identifier (IMEI) number for the mobile electronic device, and a phone description for the mobile electronic device.

12. A method according to claim 11, wherein the identifying information automatically sent from the mobile electronic device to the security service comprises:

a phone number for the mobile electronic device; and

an international mobile equipment identifier (IMEI) number for the mobile electronic device.

13. A method according to claim 11, wherein the identifying information automatically sent from the mobile electronic device to the security service comprises:

a phone number for the mobile electronic device;

an international mobile equipment identifier (IMEI) number for the mobile electronic device; and

a model number for the mobile electronic device.

14. A method according to claim 9, wherein:

the system area comprises a short messaging service (SMS) component;

the notification comprises a message in an SMS format; and

the operation of accepting the notification from the security service comprises receiving the notification from at least one of the servers via the SMS component.

15. A method according to claim 9, further comprising:

after the at least some user data has been copied from the mobile electronic device to at least one of the servers, causing at least some of the user data to be deleted from the mobile electronic device.

16. A method according to claim 15, further comprising:

after the at least some of the user data has been deleted from the mobile electronic device, causing at least some of the user data to be copied from at least one of the servers to the mobile electronic device.

17. An article of manufacture comprising:

a non-transitory machine-readable storage medium; and

a security application encoded as instructions in the non-transitory machine-readable storage medium, wherein the security application, when executed by a mobile electronic device, enables the mobile electronic device to perform operations comprising;

receiving, at the mobile electronic device, a request from an owner of the mobile electronic device to register the mobile electronic device with a security service residing at least partially on one or more servers;

in response to the request from the owner, registering the mobile electronic device with the security service;

automatically sending identifying information for the mobile electronic device from the mobile electronic device to the security service;

after the owner has registered the mobile electronic device with the security service, periodically communicating with the security service, when the mobile electronic device is in a state other than a state in which the mobile electronic device is powered off;

after the owner has registered the mobile electronic device with the security service, accepting a notification from the security service, wherein the notification comprises a message indicating that the owner of the mobile electronic device has reported a loss or requested disabling of the mobile electronic device;

in response to accepting the notification, automatically disabling at least one user function of the mobile electronic device while still allowing the mobile electronic device to communicate with the security service; and

automatically causing at least some user data to be copied from the mobile electronic device to at least one of the servers;

wherein the operation of accepting the notification from the security service comprises receiving the notification from at least one of the servers via a system area of non-volatile memory in the mobile phone; and

wherein the system area is an area that cannot be modified by a user.

18. An article of manufacture according to claim 17, wherein the notification includes no third-party certification.

19. An article of manufacture according to claim 17, wherein the operation of registering the mobile electronic device with the security service comprises:

providing the security service with at least three items from the group consisting of;

a phone number for the mobile electronic device, a phone service provider for the mobile electronic device, an International Mobile Equipment Identifier (IMEI) number for the mobile electronic device, and a phone description for the mobile electronic device.

20. An article of manufacture according to claim 19, wherein the identifying information automatically sent from the mobile electronic device to the security service comprises:

a phone number for the mobile electronic device; and

an international mobile equipment identifier (IMEI) number for the mobile electronic device.

21. An article of manufacture according to claim 19, wherein the identifying information automatically sent from the mobile electronic device to the security service comprises:

a phone number for the mobile electronic device;

an international mobile equipment identifier (IMEI) number for the mobile electronic device; and

a model number for the mobile electronic device.

22. An article of manufacture according to claim 17, wherein:

the notification comprises a message in an SMS format; and

the operation of accepting the notification from the security service comprises receiving the notification from at least one of the servers via an SMS component residing in the system area of the non-volatile memory in the mobile electronic device.

23. An article of manufacture according to claim 17, wherein the operations the security application, when executed by the mobile electronic device, enables the mobile electronic device to perform further comprise:

after the at least some user data has been copied from the mobile electronic device to at least one of the servers, causing at least some of the user data to be deleted from the mobile electronic device.

24. An article of manufacture according to claim 23, wherein the operations the security application, when executed by the mobile electronic device, enables the mobile electronic device to perform further comprise:

after the at least some of the user data has been deleted from the mobile electronic device, causing at least some of the user data to be copied from at least one of the servers to the mobile electronic device.

25. A method for providing security for a mobile electronic device, the method comprising:

receiving, at a mobile electronic device, a request from an owner of the mobile electronic device to register the mobile electronic device with a security service residing at least partially on one or more servers;

in response to the request from the owner, registering the mobile electronic device with the security service;

automatically sending identifying information for the mobile electronic device from the mobile electronic device to the security service;

after the owner has registered the mobile electronic device with the security service, accepting a notification from the security service, wherein the notification comprises a message indicating that the owner of the mobile electronic device has reported a loss or requested disabling of the mobile electronic device;

in response to accepting the notification, automatically disabling at least one user function of the mobile electronic device while still allowing the mobile electronic device to communicate with the security service;

automatically causing at least some user data to be copied from the mobile electronic device to at least one of the servers;

after the at least some user data has been copied from the mobile electronic device to at least one of the servers, causing at least some of the user data to be deleted from the mobile electronic device; and

after the at least some of the user data has been deleted from the mobile electronic device, causing at least some of the user data to be copied from at least one of the servers to the mobile electronic device;

wherein the mobile electronic device comprises non-volatile memory;

wherein the non-volatile memory comprises a changeable area that can be modified by a user and a system area that cannot be modified by the user;

wherein the security application utilizes code residing at least partially in the system area; and

wherein the operation of accepting the notification from the security service comprises receiving the notification from at least one of the servers via the system area.