Method and apparatus for creating a remotely activated secure backup service for mobile handsets

• US 8,554,176 B2
• Filed: 09/18/2007
• Issued: 10/08/2013
• Est. Priority Date: 09/18/2007
• Status: Expired due to Fees

• Current Assignee: Qualcomm, Inc.
• Original Assignee: Qualcomm, Inc.
• Inventors: McLean, Ivan H.
• Primary Examiner(s): MATHARU, MANPREET S
• Application Number:
  US11/857,383
• Publication Number:
  US 20090075630A1
• Time in Patent Office: 2,212 Days
• Field of Search: 455/411, 455/410, 455/550.1
• US Class Current: 455/411
• CPC Class Codes: G06F 21/602 Providing cryptographic facilities or services
• CPC Class Codes: G06F 21/6209 to a single file or object, e.g. in a secure envelope, encrypted and accessed using a key, or with access control rules appended to the object itself
• CPC Class Codes: G06F 2221/2101 Auditing as a secondary aspect
• CPC Class Codes: G06F 2221/2105 Dual mode as a secondary aspect
• CPC Class Codes: H04L 63/0428 wherein the data content is protected, e.g. by encrypting or encapsulating the payload
• CPC Class Codes: H04W 12/02 Protecting privacy or anonymity, e.g. protecting personally identifiable information [PII]
• CPC Class Codes: H04W 12/04 Key management, e.g. using generic bootstrapping architecture [GBA]
• CPC Class Codes: H04W 12/30 Security of mobile devices; Security of mobile applications
• CPC Class Codes: H04W 12/63 Location-dependent; Proximity-dependent
• CPC Class Codes: H04W 12/64 using geofenced areas
• CPC Class Codes: H04W 88/02 Terminal devices

Abstract

Method and systems for protecting data on a mobile handset when remotely activated by a user involve encrypting the data using an encryption key, storing the encrypted data, and deleting the non-encrypted data along with the encryption key. Data may also be uploaded to a server to via a cellular data call for use in backing up the mobile handset. A mobile handset application configures the handset to receive activation commands from a server to encrypt, upload or download data. The encryption key is either received from the server or generated by the mobile handset and communicated to the server. Mock data files may be generated and stored on the mobile handset to enable handset applications to function normally after the data files have been encrypted.

Claims

1. A method for securing data files on a mobile handset, comprising:

receiving an activation command message via a wireless network directing the mobile handset to encrypt the data files;

obtaining an encryption key upon recognizing the activation command message by;

receiving a public key in the activation command message; and

generating a symmetric key and encrypting it using the public key;

encrypting the data files using the symmetric key to generate an encrypted data file;

storing the encrypted data files in memory of the mobile handset;

transmitting the encrypted symmetric key to a server via the cellular telephone network; and

deleting the symmetric key from a memory of the mobile handset after the data files have been encrypted.

2. The method of claim 1, wherein the activation command message is received in a payload of a Short Message Service (SMS) message.

4. The mobile handset of claim 2, wherein the software instructions in the memory are further configured to cause the processor to perform the operation of receiving the activation command message in a payload of a Short Message Service (SMS) message.

3. A mobile handset, comprising:

a processor;

a wireless transceiver coupled to the processor and configured to connect to a wireless network; and

a memory coupled to the processor, the memory having stored therein software instructions configured to cause the processor to perform operations comprising;

receiving an activation command message via the wireless network directing the mobile handset to encrypt data files;

obtaining an encryption key upon recognizing the activation command message by;

receiving a public key in the activation command message; and

generating a symmetric key and encrypting it using the public key;

encrypting the data files using the symmetric key;

storing the encrypted data files in the memory;

transmitting the encrypted symmetric key to a server via the cellular telephone network; and

deleting the symmetric key from the memory after the data files have been encrypted.

5. A mobile handset, comprising:

means for receiving an activation command message via a wireless network directing the mobile handset to encrypt data files;

means for obtaining an encryption key upon recognizing the activation command message comprising;

means for receiving a public key in the activation command message; and

means for generating a symmetric key and encrypting it using the public key;

means for encrypting the data files using the symmetric key;

means for storing the encrypted data files in a memory of the mobile handset;

means for transmitting the encrypted symmetric key to a server via the cellular telephone network; and

means for deleting the symmetric key from the memory of the mobile handset after the data files have been encrypted.

6. The mobile handset of claim 5, wherein the means for receiving the activation command message comprises means for receiving the activation command message in a payload of a Short Message Service (SMS) message.

7. A non-transitory, processor-readable storage medium having stored thereon processor executable software instructions configured to cause a processor of a mobile handset to perform operations comprising:

receiving an activation command message via a wireless network directing the mobile handset to encrypt data files;

obtaining an encryption key upon recognizing the activation command message by;

receiving a public key in the activation command message; and

generating a symmetric key and encrypting it using the public key;

encrypting the data files using the encryption key;

storing the encrypted data files in a memory of the mobile handset;

transmitting the encrypted symmetric key to a server via the cellular telephone network; and

deleting the encryption key from the memory of the mobile handset after the data files have been encrypted.

8. The non-transitory, processor-readable storage medium of claim 7, wherein the software instructions stored in the processor readable memory are further configured to cause the processor to perform the operation of receiving the activation command message in a payload of a Short Message Service (SMS) message.