Proactive security for mobile devices

• US 9,258,715 B2
• Filed: 12/14/2009
• Issued: 02/09/2016
• Est. Priority Date: 12/14/2009
• Status: Active Grant

• Current Assignee: Apple Inc.
• Original Assignee: Apple Inc.
• Inventors: Borghei, Hooman
• Primary Examiner(s): Serrao, Ranodhi
• Assistant Examiner(s): RICHARDSON, THOMAS W
• Application Number:
  US12/637,640
• Publication Number:
  US 20110141276A1
• Time in Patent Office: 2,248 Days
• US Class Current: 1/1
• CPC Class Codes: H04M 1/673 the user being required to key in a code
• CPC Class Codes: H04M 1/72403 with means for local support of applications that increase the functionality
• CPC Class Codes: H04M 1/72457 according to geographic location
• CPC Class Codes: H04M 1/72463 to restrict the functionality of the device
• CPC Class Codes: H04M 1/724631 by limiting the access to the user interface, e.g. locking a touch-screen or a keypad
• CPC Class Codes: H04M 3/42221 Conversation recording systems at the subscriber's set H04M1/656
• CPC Class Codes: H04W 12/08 Access security
• CPC Class Codes: H04W 12/12 Detection or prevention of fraud
• CPC Class Codes: H04W 12/126 Anti-theft arrangements, e.g. protection against subscriber identity module [SIM] cloning
• CPC Class Codes: H04W 4/14 Short messaging services, e.g. short message services [SMS] or unstructured supplementary service data [USSD]

Abstract

Methods, program products, and systems for proactively securing mobile devices are described. A mobile device can proactively determine whether the mobile device is associated with a security risk and the level of the security risk. Upon determining a security risk, the mobile device can transmit coordinates of its current geographic location to a server. To protect privacy of authorized users, the transmission can be disabled by entering a password. If multiple failed password attempts are detected, the mobile device can proactively increase a security level of the device, and selectively protect files or other content stored on the mobile device. In some implementations, the mobile device can be transitioned into a surveillance mode where the mobile device records or captures information associated with one or more of user actions, ambient sound, images, a trajectory of the device, and transmits the recorded or captured information to the network resource.

Claims

1. A computer-implemented method for remotely managing a mobile device, the method comprising:

at a host computer, and in response to receiving a request from an entity other than the mobile device;

transmitting a first security command to the mobile device, wherein the first security command causes the mobile device to gather at least one security parameter;

receiving, from the mobile device and in response to the first security command, the least one security parameter;

calculating, based on the at least one security parameter, a security risk factor associated with the mobile device, wherein the security risk factor corresponds to a first data security scheme of a plurality of data security schemes, and each data security scheme of the plurality of data security schemes defines a set of actions to be carried out when the data security scheme is applied at the mobile device;

causing the entity to display information associated with (i) the at least one security parameter, and (ii) the security risk factor; and

transmitting, to the mobile device, a second security command, wherein the second security command causes the mobile device to;

(i) apply the first data security scheme by carrying out each action in the set of actions defined by the first data security scheme, and

(ii) enter a mode that enables the mobile device to autonomously apply a second security scheme that is different from the first data security scheme when the mobile device identifies a condition that corresponds to the second data security scheme.

2. The computer-implemented method of claim 1, wherein the at least one security parameter includes coordinates of a geographical location of the mobile device.

3. The computer-implemented method of claim 1, wherein an action in the set of actions involves deactivating user installed programs on the mobile device and scrambling at least a portion of user data on the mobile device.

4. The computer-implemented method of claim 1, wherein an action in the set of actions involves erasing information user data stored on the mobile device.

5. The computer-implemented method of claim 1, wherein an action in the set of actions involves recording activities and transmitting information about the activities to the host computer.

6. The computer-implemented method of claim 1, wherein the at least one security parameter comprises a change in music preferences indicated by a change in music downloaded onto the mobile device.

7. The computer-implemented method of claim 1, wherein the at least one security parameter comprises a number of password inputs that do not match a correct user password.

8. A system configured to remotely manage a mobile device, the system comprising:

a processor; and

a memory configured to store instructions that, when executed by the processor, cause the system to carry out steps that include;

receiving a request from an entity other than the mobile device;

in response to the request, transmitting a first security command to the mobile device, wherein the first security command causes the mobile device to gather at least one security parameter;

receiving, from the mobile device and in response to the first security command, the least one security parameter;

calculating, based on the at least one security parameter, a security risk factor associated with the mobile device, wherein the security risk factor corresponds to a first data security scheme of a plurality of data security schemes, and each data security scheme of the plurality of data security schemes defines a set of actions to be carried out when the data security scheme is applied at the mobile device;

causing the entity to display information associated with (i) the at least one security parameter, and (ii) the security risk factor; and

transmitting, to the mobile device, a second security command, wherein the second security command causes the mobile device to;

(i) apply the first data security scheme by carrying out each action in the set of actions defined by the first data security scheme, and

(ii) enter a mode that enables the mobile device to autonomously apply a second security scheme that is different from the first data security scheme when the mobile device identifies a condition that corresponds to the second data security scheme.

9. The system of claim 8, wherein the at least one security parameter includes coordinates of a geographical location of the mobile device.

10. The system of claim 8, wherein an action in the set of actions involves deactivating user installed programs on the mobile device and scrambling at least a portion of user data on the mobile device.

11. The system of claim 8, wherein an action in the set of actions involves erasing information user data stored on the mobile device.

12. The system of claim 8, wherein an action in the set of actions involves recording activities and transmitting information about the activities to the system.

13. The system of claim 8, wherein the at least one security parameter comprises a change in music preferences indicated by a change in music downloaded onto the mobile device.

14. The system of claim 8, wherein the at least one security parameter comprises a number of password inputs that do not match a correct user password.

15. A non-transitory computer readable storage medium configured to store instructions that, when executed by a processor included in a computing device, cause the computing device to remotely manage a mobile device, by carrying out steps that include:

receiving a request from an entity other than the mobile device;

in response to the request, transmitting a first security command to the mobile device, wherein the first security command causes the mobile device to gather at least one security parameter;

receiving, from the mobile device and in response to the first security command, the least one security parameter;

calculating, based on the at least one security parameter, a security risk factor associated with the mobile device, wherein the security risk factor corresponds to a first data security scheme of a plurality of data security schemes, and each data security scheme of the plurality of data security schemes defines a set of actions to be carried out when the data security scheme is applied at the mobile device;

causing the entity to display information associated with (i) the at least one security parameter, and (ii) the security risk factor; and

transmitting, to the mobile device, a second security command, wherein the second security command causes the mobile device to;

(i) apply the first data security scheme by carrying out each action in the set of actions defined by the first data security scheme, and

(ii) enter a mode that enables the mobile device to autonomously apply a second security scheme that is different from the first data security scheme when the mobile device identifies a condition that corresponds to the second data security scheme.

16. The non-transitory computer readable storage medium of claim 15, wherein the at least one security parameter includes coordinates of a geographical location of the mobile device.

17. The non-transitory computer readable storage medium of claim 15, wherein an action in the set of actions involves deactivating user installed programs on the mobile device and scrambling at least a portion of user data on the mobile device.

18. The non-transitory computer readable storage medium of claim 15, wherein an action in the set of actions involves erasing information user data stored on the mobile device.

19. The non-transitory computer readable storage medium of claim 15, wherein an action in the set of actions involves recording activities and transmitting information about the activities to the computing device.

20. The non-transitory computer readable storage medium of claim 15, wherein the at least one security parameter comprises a change in music preferences indicated by a change in music downloaded onto the mobile device.