Enabling remote and anonymous control of mobile and portable multimedia devices for security, tracking and recovery

• US 8,750,828 B2
• Filed: 03/11/2013
• Issued: 06/10/2014
• Est. Priority Date: 11/25/2008
• Status: Active Grant

• Current Assignee: Avago Technologies International Sales Pte Limited (Broadcom, Inc.)
• Original Assignee: Broadcom Corporation (Broadcom, Inc.)
• Inventors: Bennett, James D., Karaoguz, Jeyhan
• Primary Examiner(s): RAMPURIA, SHARAD K
• Application Number:
  US13/792,641
• Publication Number:
  US 20130203387A1
• Time in Patent Office: 456 Days
• Field of Search: 455/404.2, 455/144, 455/141.1, 455/141.2, 455/420, 455/425, 455/456.2, 455/456.3, 455/456.6, 455/419, 455410-4144, 709/217, 709203-206, 702/188, 379/32.01
• US Class Current: 455/410
• CPC Class Codes: H04L 63/1441 Countermeasures against malicious traffic countermeasures against attacks on cryptographic mechanisms H04L9/002
• CPC Class Codes: H04L 63/30 for supporting lawful interception, monitoring or retaining of communications or communication related information circuit switched telephony call monitoring H04M3/2281
• CPC Class Codes: H04M 1/72415 for remote control of appliances
• CPC Class Codes: H04M 2250/10 including a GPS signal receiver
• CPC Class Codes: H04M 2250/12 including a sensor for measuring a physical value, e.g. temperature or motion telephones including GPS signal receivers H04M2250/10
• CPC Class Codes: H04M 2250/52 including functional features of a camera constructional features concerning the integration of cameras in portable phones H04M1/0264
• CPC Class Codes: H04W 12/06 Authentication
• CPC Class Codes: H04W 12/082 using revocation of authorisation
• CPC Class Codes: H04W 12/12 Detection or prevention of fraud
• CPC Class Codes: H04W 12/30 Security of mobile devices; Security of mobile applications
• CPC Class Codes: H04W 12/63 Location-dependent; Proximity-dependent

Abstract

Aspects of the invention comprise a remote tracking and control server operable to transparently activate control of resources and to monitor operations on a target handheld communication device utilizing code installed on the handheld device. The resources may comprise a camera, microphone, GPS receiver, input device, display, speaker, wireless and/or wire-line transmitter and/or receiver. The monitoring and/or controlling activity is protected from interruption. The handheld device may be accessed by a securely stored unique identifier. Access to the controlling function and/or the resources by a user of the handheld device may be restricted. Monitored information is stored on the handheld device and communicated to the tracking server. The control server may receive monitored information from the handheld device whenever the device is coupled to a communication network. Monitoring may be initiated based on detected motion, sound, user input, video and/or touch.

Claims

1. A method comprising:

at a server system,

receiving an indication message from a user, the indication message including an identifier of an access device to be monitored for unauthorized use by an unauthorized user of the access device and identification of activity of the access device to be monitored, the user being an owner or authorized user of the access device;

receiving from the access device a secure unique identifier of the access device, the unique identifier being securely stored on the access device under control of the user and being independent of a network access identifier for the access device;

authenticating the access device based on the received identifier of the access device from the user and the received unique identifier from the access device; and

in response, providing to the access device commands for execution by the access device for monitoring activity of the access device.

2. The method of claim 1 wherein providing commands for execution comprises:

providing commands to cause the access device to report its location.

3. The method of claim 1 wherein providing commands for execution comprises:

providing commands to cause the access device to initiate a communication.

4. The method of claim 1 wherein providing commands for execution comprises:

providing commands to cause the access device to register with the server system.

5. The method of claim 1 wherein providing commands for execution comprises:

providing commands to cause the access device to activate one or more resources of the access device.

6. The method of claim 5 wherein providing commands comprises providing commands to cause a camera of the access device to produce image data and to cause the access device to communicate the image data to the server.

7. The method of claim 5 wherein providing commands comprises providing commands to simulate key entry to control the access device.

8. The method of claim 1 further comprising:

providing a secure interface for access by the user;

receiving registration communications from the user identifying the user;

establishing a secure account for the user; and

receiving device management commands from the user for managing the access device including receiving the indication message.

9. The method of claim 8 further comprising storing status data for the access device and wherein receiving device management commands comprises receiving a command from the user to change the status data to indicate that the access device should be a target of monitoring.

10. The method of claim 9 wherein receiving device management commands comprises receiving from the user commands to cause the server to communicate the commands for execution by the access device for monitoring activity of the access device.

11. A server system comprising:

a user interface for secure access over a network by users to receive from the users information defining remote control of one or more access devices and information defining respective unique identifiers for each respective access device of the one or more access devices;

a communication interface for communication with the one or more access devices;

data defining a user account associating a respective user with one or more respective access devices based in part on the information defining the respective unique identifiers provided by the respective user for each respective access device of the one or more access devices;

code to gain secure access via the communication interface to the one or more respective access devices and to receive from the one or more respective access devices respective unique device identifiers which have been securely stored on the respective access devices under control of the respective user for each respective access device of the one or more access devices;

code to remotely control via the communication interface resources of the one or more respective access devices in response to the information defining remote control and the received respective unique device identifiers and the respective unique identifiers for each respective access device of the one or more access devices.

12. The server system of claim 11 further comprising:

code to initiate a communication to a user when a specified type of activity or behavior in an access device associated with the user is detected by the server system.

13. The server system of claim 12 wherein the code to initiate the communication comprises code to cause the server system to contact the user.

14. The server system of claim 12 wherein the code to initiate the communication comprises code to cause the access device to initiate the communication to the user.

15. The server system of claim 11 wherein the user interface comprises a local control module to cooperate with a client control module of a device operated by a user to view and modify the data defining a user account.

16. The server system of claim 15 wherein the local control module is further operative to receive from the client control module information defining resources of an associate access device and control of the resources.

17. The server system of claim 11 wherein the code to gain secure access to the one or more respective access devices comprises code to receive a secure identifier stored inaccessibly on an access device and compare the received secure identifier with the data defining the user account and authenticate the access device.

18. A method comprising:

at a tracking and control server,

receiving from a user device over a network a communication identifying an access device associated with a user of the user device as a target of surveillance;

receiving from the access device a request for secure access to the server system, the request including identifying information for the access device;

authenticating the access device in response to the request;

receiving a challenge communication from the access device;

in response to the received challenge, communicating a status of target surveillance to the access device;

receiving from the access device surveillance data; and

communicating information about the surveillance data to the user device.

19. The method of claim 18 wherein communicating a status of target surveillance to the access device comprises communicating control instructions to the access device, the control instructions to cause the access device to report the geographic location of the access device to the tracking and control server.

20. The method of claim 18 wherein communicating a status of target surveillance to the access device comprises communicating control instructions to the access device, the control instructions to cause the access device to disable at least a portion of the access device.