Method and system for mobile information security protection

• US 8,914,893 B2
• Filed: 08/24/2011
• Issued: 12/16/2014
• Est. Priority Date: 08/24/2011
• Status: Expired due to Fees

• Current Assignee: Netqin Mobile Company Limited
• Original Assignee: Netqin Mobile Company Limited
• Inventors: Zhao, Shen, Wang, Chen, Lin, Yu, Zou, Shihong
• Primary Examiner(s): Nalven, Andrew
• Assistant Examiner(s): MALINOWSKI, WALTER J
• Application Number:
  US13/217,022
• Publication Number:
  US 20130055405A1
• Time in Patent Office: 1,210 Days
• Field of Search: None
• US Class Current: 726/26
• CPC Class Codes: G06F 11/3438 monitoring of user actions tracking the activity of the user H04L67/535
• CPC Class Codes: G06F 11/3476 Data logging G06F11/14, G06F11/2205 take precedence
• CPC Class Codes: G06F 21/10 Protecting distributed programs or content, e.g. vending or licensing of copyrighted material protection in video systems or pay television H04N7/16 ; Digital rights management [DRM]
• CPC Class Codes: G06F 21/577 Assessing vulnerabilities and evaluating computer system security
• CPC Class Codes: H04L 63/1433 Vulnerability analysis

Abstract

A method and system for mobile information security protection may include extracting, by a first processor, identification information corresponding to a plurality of applications installed on a mobile device, sending the extracted identification information to a server, matching, by a second processor, the identification information to information stored in a database storage, receiving matched information from the database storage as a result of matching the identification information, sending the matched information to the mobile device, and presenting the matched information to a user of the mobile device.

Claims

1. A system for mobile information security protection, the system comprises:

a local end comprising;

an information collecting module executing at a central processing unit (CPU) of a mobile device, the information collecting module operable for extracting identification information corresponding to a plurality of applications installed on a mobile device;

a local communication module executing at the CPU of the mobile device, the local communication module operable for sending the extracted identification information to a server and receiving a security report of the mobile phone from the server; and

a display module executing at the CPU of the mobile device, the display module operable for presenting information received from the server to an user of the mobile device;

a server end comprising;

a server communication module for receiving the extracted identification information from the mobile device and for sending the security report to the mobile device; and

a comparator module for matching the extracted identification information to information stored in a database;

wherein the database includes a plurality of information packages, each information package corresponding to each of the plurality of applications,

wherein the plurality of information packages in the database further includes security risk information of the plurality of applications,

wherein the security report is generated based on the security risk information associated with at least one application in the matched information, and

wherein the security report comprises a collection of applications on the mobile device which can access hardware ID, a collection of applications on the mobile device which can access location information, a collection of applications on the mobile device which can access contacts information, and a collection of applications on the mobile device which can access photos or videos.

2. The system of claim 1, wherein each of the information packages includes at least one of the extracted identification information and privacy risk information associated with each application in a corresponding package.

3. The system of claim 1, wherein the server end further includes a data management module being configured to extract identification information of each application and forward the extracted identification information to the comparator module.

4. The system of claim 3, wherein the data management module is configured to copy and store the information included in a plurality of information packages, each information package corresponding to each application, as a result of the comparator module matching the extracted identification information.

5. The system of claim 4, wherein the data management module is configured to compile and generate the security report.

6. The system of claim 5, wherein the server communication module is configured to send the security report to the mobile device.

7. The system of claim 1, wherein the information collecting module is configured to collect and arrange multiple application identifications executed on the mobile device.

8. A method for mobile information security protection, the method comprising:

extracting, by a first processor executing at a central processing unit (CPU) of a mobile device, identification information corresponding to a plurality of applications installed on the mobile device;

sending the extracted identification information to a server;

matching, by a second processor, the identification information to information stored in a database storage, wherein the database storage includes a plurality of information packages, each information package corresponding to each of the plurality of applications, and the plurality of information packages in the database storage further includes security risk information of the plurality of applications;

receiving matched information from the database storage as a result of matching the identification information;

compiling and generating a security report of the mobile device based on the security risk information associated with at least one application in the matched information;

sending the security report to the mobile device;

presenting the security report to a user of the mobile device; and

wherein the security report comprises a collection of applications on the mobile device which can access hardware ID, a collection of applications on the mobile device which can access location information, a collection of applications on the mobile device which can access contacts information, and a collection of applications on the mobile device which can access photos or videos.

9. The method of claim 8, further comprising storing at least one of the extracted identification information, and privacy risk information associated with each application in a corresponding package.

10. The method of claim 8, further comprising extracting identification information from each application and forwarding the extracted identification information to the server for matching.

11. The method of claim 8, further comprising copying and storing the information included in a package in a memory, as a result of matching the extracted identification information.

12. The method of claim 11, wherein the security report is further compiled and generated based on privacy risk level information associated with each application in a corresponding package.

13. The method of claim 8, further comprising extracting the identification information corresponding to the plurality of applications executed on the mobile device.