Method and apparatus for auxiliary communications with mobile communications device

• US 8,855,599 B2
• Filed: 12/31/2012
• Issued: 10/07/2014
• Est. Priority Date: 12/31/2012
• Status: Active Grant

• Current Assignee: F-Secure Corporation (F-Secure Oyj)
• Original Assignee: Lookout Incorporated
• Inventors: Wang, Jinggang, Buck, Brian James
• Primary Examiner(s): Gelin, Jean
• Application Number:
  US13/732,083
• Publication Number:
  US 20140187202A1
• Time in Patent Office: 645 Days
• Field of Search: 455/410, 455/411, 455/456.1, 455/461, 455/432.1, 455/565
• US Class Current: 455/410
• CPC Class Codes: H04L 63/18 using different networks or channels, e.g. using out of band channels cryptographic mechanisms or cryptographic arrangements for key distribution involving distinctive intermediate devices or communication paths H04L9/0827; cryptographic mechanisms or cryptographic arrangements for authentication using a plurality of channels H04L9/3215
• CPC Class Codes: H04W 12/02 Protecting privacy or anonymity, e.g. protecting personally identifiable information [PII]
• CPC Class Codes: H04W 12/06 Authentication
• CPC Class Codes: H04W 12/08 Access security
• CPC Class Codes: H04W 12/12 Detection or prevention of fraud
• CPC Class Codes: H04W 12/126 Anti-theft arrangements, e.g. protection against subscriber identity module [SIM] cloning

Abstract

A method and apparatus for auxiliary communications capability in a mobile communications device. The mobile communications device is configured with a hidden ROM that configures a security component to work separate and apart from the OS. A secondary transceiver is configured with the security component to send and receive security transmissions, also separate and apart from the OS and the primary transceiver of the OS. Logic to detect specified trigger events is hard-coded into the hidden ROM, and detection of such an event places the mobile communications device into a special security mode. While in the special security mode, the secondary transceiver can send and receive security messages, including the location of the mobile communications device. Further, depending upon the received messages or commands, the security component can take pre-programmed security actions, such as erasing or faking data in the device.

Claims

1. A method for locating a lost or stolen mobile communications device, wherein a mobile communications device operating system resides in a primary read-only memory, and relevant data and components for the operating system are loaded from the primary read-only memory into a random-access memory of the mobile communications device, comprising:

providing a secondary read-only memory in the mobile communications device configured to work separately from and in parallel with the operating system, the secondary read-only memory storing computer-readable instructions, which when executed by a processor, operate a first security component and a security transceiver, the security transceiver configured to operate independently of a primary transceiver also controlled by the operating system;

detecting, by the first security component, an occurrence of a defined trigger event;

in response to the detected trigger event, transmitting by the security transceiver a first security message to a remote device;

receiving, by the security transceiver, a second security message from the remote device; and

performing, by the first security component, a defined action on the mobile communications device in response to the received second security message.

2. The method of claim 1, further comprising:

setting a flag if the second security message indicates that the mobile communications device has been reported as lost or stolen.

3. The method of claim 2, further comprising:

backing up at least some of the data in the random-access memory if the flag is set.

4. The method of claim 2, further comprising:

erasing at least some of the data in the random-access memory if the flag is set.

5. The method of claim 2, further comprising:

substituting fake data for at least some of the data in the random-access memory if the flag is set.

6. The method of claim 2, further comprising:

obtaining a location for the mobile communications device if the flag is set; and

transmitting, by the security transceiver, the location to the remote device.

7. The method of claim 2, further comprising:

placing the secondary read-only memory into a sleep mode if the flag is set; and

periodically waking up the secondary read-only memory to send transmissions to the remote device.

8. The method of claim 2, further comprising:

receiving, by the security transceiver, at least one command from the remote device if the flag is set; and

performing, by the first security component, a defined action on the mobile communications device in response to the command.

9. The method of claim 2, further comprising:

recording, using the operating system, audio, video or picture information if the flag is set; and

storing, in a predefined location in the random-access memory, the audio, video or picture information.

10. The method of claim 9, further comprising:

transmitting, by the security transceiver, the audio, video or picture information to the remote device.

11. The method of claim 1, wherein the defined trigger events include removing a primary SIM card, removing a primary battery, and detecting a low power level at the primary battery.

12. A method for starting up and operating a mobile communications device, wherein a mobile communications device operating system resides in a primary read-only memory, and relevant data and components for the operating system are loaded from the primary read-only memory into a random-access memory of the mobile communications device, comprising:

(i) initializing a secondary read-only memory that stores computer-readable instructions, which when executed by a processor, configure a first security component to (a) control a first transceiver, (b) detect defined events occurring within the operating system, (c) capture and store data in a predefined location in the random-access memory in response to a defined event, and (d) send and receive transmissions with the first transceiver;

(ii) performing a defined action on data in the secondary read-only memory if a flag is set indicating that the mobile communications device has been lost or stolen;

(iii) initializing the primary read-only memory that stores computer-readable instructions, which when executed by a processor, configure the operating system to (a) load relevant data and computer-readable instructions into the random-access memory, (b) control a second transceiver, and (c) send and receive transmissions with the second transceiver;

(iv) operating the mobile communications device in accord with the operating system;

(v) detecting, by the first security component, a defined trigger event occurring in the operating system;

(vi) transmitting, by the first transceiver in response to the detected trigger event, a first security message to a remote device; and

(vii) setting the flag if a second security message is received by the first transceiver from a remote device indicating that the mobile communications device has been reported as lost or stolen.

13. The method of claim 12, the defined action further comprising:

backing up at least some of the data in the random-access memory if the flag is set.

14. The method of claim 12, the defined action further comprising:

erasing at least some of the data in the random-access memory if the flag is set.

15. The method of claim 12, the defined action further comprising:

substituting fake data for at least some of the data in the random-access memory if the flag is set.

16. The method of claim 12, the defined action further comprising:

obtaining a location for the mobile communications device if the flag is set; and

transmitting, by the first transceiver, the location to the remote device.

17. The method of claim 12, the defined action further comprising:

placing the secondary read-only memory into a sleep mode if the flag is set; and

periodically waking up the secondary read-only memory to send transmissions from the first transceiver to the remote device.

18. The method of claim 12, the defined action further comprising:

receiving, by the first transceiver, at least one command from the remote device if the flag is set; and

performing, by the first security component, a defined action on the mobile communications device in response to the command.

19. The method of claim 12, the defined action further comprising:

recording, using the operating system, audio, video or picture information if the flag is set; and

storing, in a predefined location in the random-access memory, the audio, video or picture information.

20. The method of claim 19, the defined action further comprising:

transmitting, by the first transceiver, the audio, video or picture information to the remote device.

21. The method of claim 12, wherein the defined trigger events include removing a primary SIM card, removing a primary battery, and detecting a low power level at the primary battery.

22. A mobile communications device, comprising:

a random-access memory;

a primary read-only memory storing computer-readable instructions, which when executed by a processor operate a first security component to erase at least some of the data in a defined location of the random-access memory if a security flag is set;

an operating system residing on the primary read-only memory, wherein relevant data and components for the operating system are loaded from the primary read-only memory into the random-access memory on start-up;

a primary transceiver controlled by the operating system; and

a secondary read-only memory storing computer-readable instructions, which when executed by a processor configure the secondary read-only memory to work separately from and in parallel with the operating system, the secondary read-only memory also including computer-readable instructions to operate a second security component and a security transceiver, the security transceiver configured to operate independently of the primary transceiver, the second security component configured to monitor the operating system to detect at least one defined trigger event, wherein the security transceiver transmits a security message to a remote device if a defined trigger event is detected;

wherein the random-access memory includes a third security component configured to save data into a defined location.

23. The mobile communications device of claim 22, wherein the primary read-only memory is configured to erase at least some data in the random-access memory if the security flag is set.

24. The mobile communications device of claim 22, wherein the secondary read-only memory is configured to substitute fake data for actual data in the defined location of the random-access memory if the security flag is set.

25. The mobile communications device of claim 22, wherein the secondary read-only memory is configured to obtain a location for the mobile communications device if the security flag is set, and to transmit the location to the remote device using the security transceiver.

26. The mobile communications device of claim 22, wherein the secondary read-only memory is configured to enter a sleep mode if the security flag is set, and to periodically wake up and send transmissions from the security transceiver to the remote device.

27. The mobile communications device of claim 22, wherein the secondary read-only memory is configured to receive at least one command from the remote device via the security transceiver if the flag is set, and to perform a defined action on the mobile communications device using the second security component in response to the command.

28. The mobile communications device of claim 22, wherein the secondary read-only memory is configured to record, using the operating system, audio, video or picture information if the flag is set, and to store, in a predefined location in the random-access memory, the audio, video or picture information.

29. The mobile communications device of claim 22, wherein the security transceiver is configured to transmit the audio, video or picture information to the remote device.

30. The mobile communications device of claim 22, wherein the defined trigger events include removing a primary SIM card, removing a primary battery, and detecting a low power level at the primary battery.