Unauthorized location detection and countermeasures

• US 8,627,484 B2
• Filed: 12/22/2010
• Issued: 01/07/2014
• Est. Priority Date: 12/22/2010
• Status: Active Grant

• Current Assignee: Skyhook Holding, Inc. (Liberty Broadband Corp.)
• Original Assignee: TruePosition Incorporated
• Inventors: Anderson, Robert J., Ward, Matthew L., Beckley, Frederic A.
• Primary Examiner(s): Kim, Jung
• Assistant Examiner(s): Ho, Thomas
• Application Number:
  US12/976,908
• Publication Number:
  US 20120167207A1
• Time in Patent Office: 1,112 Days
• Field of Search: 726/22, 726/26, 726/29, 726/30
• US Class Current: 726/26
• CPC Class Codes: H04W 12/02 Protecting privacy or anonymity, e.g. protecting personally identifiable information [PII]
• CPC Class Codes: H04W 12/08 Access security
• CPC Class Codes: H04W 12/12 Detection or prevention of fraud
• CPC Class Codes: H04W 4/02 Services making use of location information
• CPC Class Codes: H04W 4/029 Location-based management or tracking services
• CPC Class Codes: H04W 4/50 Service provisioning or reconfiguring

Abstract

A location sentry system is provided for use within a mobile device. The sentry system can be configured to detect unauthorized attempts to locate mobile devices by monitoring messages passed between the mobile device and the wireless network and/or messages passed between components of the mobile device, and determining that one or more of the messages is/are indicative of an attempt to locate the mobile device. In response to a determination that an unauthorized attempt has been detected, the location sentry can be configured to take one or more actions. For example, the location sentry system could prevent location information from being sent back to the wireless network and/or the location sentry system could cause incorrect information to be sent to the wireless network.

Claims

1. A mobile device operable to communicate with a wireless network and configured to monitor software running on the mobile device to detect unauthorized location attempts, comprising:

a processor; and

a memory coupled to the processor, the memory including instructions that upon execution cause the processor to execute an operational procedure for monitoring software running on the mobile device, the memory comprising;

instructions for identifying a sequence of events indicative of a possible unauthorized attempt to locate the mobile device, wherein the sequence of events includes;

an event indicating that a location subsystem of the mobile device was activated;

an event indicating that the mobile device entered into a scanning mode for receiving beacon signals from a plurality of base stations or for receiving satellite signals from a plurality of satellites; and

an event indicating that data used to assist in a location calculation was received from a wireless network;

instructions for logging the sequence of events and analyzing the sequence of events to identify an unauthorized location attempt;

instructions for responding to the unauthorized location attempt by transmitting inaccurate location information;

instructions for a receiver-location sentry client application that encapsulates an application program interface for a wireless receiver, wherein the receiver-location sentry client application is configured to analyze incoming messages received by the wireless receiver;

instructions for a transmitter-location sentry client application that encapsulates an application program interface for a wireless transmitter, wherein the transmitter-location sentry client application is configured to analyze messages placed into an outgoing queue for transmission to the wireless network; and

instructions for a location-subsystem-location sentry client application that encapsulates an application program interface for the location subsystem, wherein the location-subsystem-location sentry client application is configured to analyze messages sent to the location subsystem.

2. The mobile device of claim 1, wherein the memory further comprises:

instructions for determining that the sequence of events includes an event indicating that a program executing on the mobile device requested to access the location subsystem; and

instructions for determining that the program is not authorized to access the location subsystem.

3. The mobile device of claim 2, wherein the program is a program stored on a SIM card.

4. The mobile device of claim 1, wherein the memory further comprises:

instructions for determining that the sequence of events includes an event indicating that the mobile device transitioned from an idle mode to an active mode.

5. The mobile device of claim 1, wherein the memory further comprises:

instructions for displaying an alert indicating that an unauthorized attempt to locate the mobile device was identified.

6. The mobile device of claim 1, wherein the memory further comprises:

instructions for sending an error message to the wireless network indicating that the mobile device cannot support a location attempt.

7. The mobile device of claim 1, wherein the memory further comprises:

instructions for sending a message to the wireless network that indicates that the mobile device does not include a location subsystem.

8. The mobile device of claim 1, wherein the memory further comprises:

instructions for sending inaccurate location information to the wireless network.

9. The mobile device of claim 1, wherein the memory further comprises:

instructions for sending location information for a default location to the wireless network.

10. The mobile device of claim 1, wherein the memory further comprises:

instructions for sending location information for a previous location to the wireless network.

11. The mobile device of claim 1, wherein the memory further comprises:

instructions for sending inaccurate satellite measurement information to the wireless network.

12. The mobile device of claim 1, wherein the memory further comprises:

instructions for sending inaccurate location related signal measurement data to the wireless network.

13. The mobile device of claim 1, wherein the memory further comprises:

instructions for sending a cell-ID identifier randomly selected from a group of active set cells to the wireless network.

14. The mobile device of claim 1, wherein the memory further comprises:

instructions for sending identifiers for a subset of detected beacon signals to the wireless network.

15. The mobile device of claim 1, wherein the memory further comprises:

instructions for sending information to the wireless network indicating that the satellite coverage is inadequate to receive satellite signals.

16. The mobile device of claim 1, wherein the memory further comprises:

instructions for running an operating system for the mobile device within a virtualization environment, wherein the virtualization environment is configured to monitor messages received by the wireless receiver, messages placed into an outgoing queue for transmission to the wireless network, and messages sent to the location subsystem for message indicative of attempts to location to the mobile device.

17. The mobile device of claim 1, wherein the memory further comprises:

instructions for a wireless receiver application program interface, wherein the wireless receiver application program interface is configured to monitor incoming messages for messages that include location request and/or message that include data used to assist in a location calculation;

instructions for wireless transmitter application program interface, wherein the wireless transmitter application program interface is configured to monitor outgoing for messages that include location information; and

instructions for a location subsystem application program interface, wherein the location subsystem application program interface is configured to monitor messages sent to the location subsystem for unauthorized attempts to activate the location subsystem.