Automatic security action invocation for mobile communications device

• US 9,077,485 B2
• Filed: 05/18/2007
• Issued: 07/07/2015
• Est. Priority Date: 05/18/2006
• Status: Active Grant

• Current Assignee: Blackberry Limited
• Original Assignee: Blackberry Limited
• Inventors: Brown, Michael S., Adams, Neil, Fyke, Steven, Little, Herbert
• Primary Examiner(s): NGUYEN, DINH
• Application Number:
  US11/750,568
• Publication Number:
  US 20080009264A1
• Time in Patent Office: 2,972 Days
• Field of Search: 379/37, 379/41, 379/45, 379/51, 455/404, 455/410, 455/411, 455/414, 455/456, 455/521, 455/551, 455/558, 455/565, 455/566, 455/571, 455/572, 455/573, 455/574, 455/575.1
• US Class Current: 1/1
• CPC Class Codes: G06F 21/305 by remotely controlling device operation
• CPC Class Codes: G06F 21/6218 to a system of files or objects, e.g. local or distributed file system or database
• CPC Class Codes: G06F 21/88 Detecting or preventing theft or loss
• CPC Class Codes: G06F 2221/2143 Clearing memory, e.g. to prevent the data from being stolen
• CPC Class Codes: H04L 2209/80 Wireless network architectures or network communication protocols for wireless network security H04W12/00
• CPC Class Codes: H04L 63/102 Entity profiles
• CPC Class Codes: H04L 9/00 Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols
• CPC Class Codes: H04W 12/02 Protecting privacy or anonymity, e.g. protecting personally identifiable information [PII]
• CPC Class Codes: H04W 12/08 Access security
• CPC Class Codes: H04W 12/082 using revocation of authorisation
• CPC Class Codes: H04W 12/12 Detection or prevention of fraud
• CPC Class Codes: H04W 12/61 Time-dependent
• CPC Class Codes: H04W 8/02 Processing of mobility data, e.g. registration information at HLR [Home Location Register] or VLR [Visitor Location Register]; Transfer of mobility data, e.g. between HLR, VLR or external networks
• CPC Class Codes: H04W 8/245 from a network towards a terminal

Abstract

A mobile communications device, method, and computer program product for providing security on a mobile communications device are described. In accordance with one example embodiment, the mobile communications device comprises: a processor; a communications subsystem connected to the processor operable to exchange signals with a wireless network and with the processor; a storage element connected to the processor and having a plurality of application modules and data stored thereon, the data comprising at least user application data associated with the application modules and service data including data for establishing communications with the wireless network; and a security module operable to determine if a battery level falls below a predetermined threshold and perform a security action comprising erasing or encrypting at least some of the data on the storage element if the battery power falls below the predetermined threshold.

Claims

1. A mobile communications device, comprising:

a processor;

a communications subsystem connected to the processor operable to exchange signals with a wireless network and with the processor;

a battery connected to the processor;

a persistent storage element connected to the processor and having a plurality of application modules and data stored thereon, the data comprising at least user application data associated with the application modules and service data including data for establishing communications with the wireless network; and

a security module operable to monitor to determine if a battery level of the battery falls below a predetermined threshold and perform a security action comprising encrypting at least some of the data on the storage element if the battery power falls below the predetermined threshold,

wherein the security module operation of monitoring to determine if the battery level falls below the predetermined threshold and performing the security action by the security module is enabled and disabled by respective policy messages received on the mobile communications device.

2. The mobile communications device of claim 1, wherein the predetermined threshold is a level at which the mobile communications device will disable the operability of the communications subsystem to exchange signals with the wireless network.

3. The mobile communications device of claim 1, wherein the predetermined threshold is a level below which the mobile communications device does not have enough power to perform the security action.

4. The mobile communications device of claim 1, wherein the security action comprises encrypting substantially all of the user application data from the storage element.

5. The mobile communications device of claim 1, wherein the security action comprises encrypting substantially all of the service data from the storage element.

6. The mobile communications device of claim 1, wherein the service data further includes data required to establish communications through a wireless gateway connected to the wireless network.

7. The mobile communications device of claim 1, wherein the security module is configurable by the user to encrypt the data on the storage element, or selectively encrypt portions of the data on the storage element.

8. A method for providing security on a mobile communications device, the mobile communications device being configured to communicate with a wireless communications network and including a persistent storage element having data stored thereon, the method comprising the acts of:

monitoring to determine if a battery level of a battery on the mobile communications device falls below a predetermined threshold; and

if the battery power falls below the predetermined threshold, performing a security action comprising encrypting at least some of the data on the storage element,

wherein the monitoring to determine if the battery level falls below the predetermined threshold and performing the security action if the battery power falls below the predetermined threshold is enabled and disabled by respective policy messages received on the mobile communications device.

9. The method of claim 8, wherein the predetermined threshold is a level at which the mobile communications device will disable the operability of the communications subsystem to exchange signals with the wireless network.

10. The method of claim 8, wherein the predetermined threshold is a level below which the mobile communications device does not have enough power to perform the security action.

11. The method of claim 8, wherein the security action comprises encrypting substantially all of the user application data from the storage element.

12. The method of claim 8, wherein the security action comprises encrypting substantially all of the service data from the storage element.

13. The method of claim 8, wherein the service data further includes data required to establish communications through a wireless gateway connected to the wireless network.

14. The method of claim 8, wherein the security action is configurable by the user to encrypt the data on the storage element, or selectively encrypt portions of the data on the storage element.

15. A computer program product comprising a non-transitory machine-readable medium embodying instructions executable on a mobile communications device for providing security on the mobile communications device, the machine-readable instructions comprising:

code for monitoring to determine if a battery level of a battery on the mobile communications device falls below a predetermined threshold; and

code for performing a security action comprising encrypting at least some of the data on a persistent storage element if the battery power falls below the predetermined threshold,

wherein the code for monitoring and the code for performing is enabled and disabled by respective policy messages received on the mobile communications device.