Method for mitigating the unauthorized use of a device

• US 9,576,157 B2
• Filed: 09/03/2008
• Issued: 02/21/2017
• Est. Priority Date: 04/02/2008
• Status: Active Grant

• Current Assignee: Blancco Technology Group Ip Oy
• Original Assignee: Inhance Technology
• Inventors: Fitzgerald, William, Bermingham, Peter, Hannigan, Frank, Prendergast, Paul
• Primary Examiner(s): Patel, Nimesh
• Application Number:
  US12/203,840
• Publication Number:
  US 20090253410A1
• Time in Patent Office: 3,093 Days
• Field of Search: 726/4, 726/14, 726/17, 726/22, 713/152, 713/164, 713/166, 713/182, 455/411, 455/414.1
• US Class Current: 1/1
• CPC Class Codes: G06F 21/88 Detecting or preventing theft or loss
• CPC Class Codes: G06F 2221/2111 Location-sensitive, e.g. geographical location, GPS
• CPC Class Codes: H04M 1/724631 by limiting the access to the user interface, e.g. locking a touch-screen or a keypad
• CPC Class Codes: H04W 12/08 Access security
• CPC Class Codes: H04W 12/082 using revocation of authorisation
• CPC Class Codes: H04W 12/12 Detection or prevention of fraud
• CPC Class Codes: H04W 12/126 Anti-theft arrangements, e.g. protection against subscriber identity module [SIM] cloning
• CPC Class Codes: H04W 12/30 Security of mobile devices; Security of mobile applications
• CPC Class Codes: H04W 12/63 Location-dependent; Proximity-dependent
• CPC Class Codes: H04W 12/65 Environment-dependent, e.g. using captured environmental data
• CPC Class Codes: H04W 12/68 Gesture-dependent or behaviour-dependent
• CPC Class Codes: H04W 88/02 Terminal devices

Abstract

The invention is directed to systems and methods for detecting the loss, theft or unauthorized use of a device and/or altering the functionality of the device in response. In one embodiment, a device monitors its use, its local environment, and/or its operating context to determine that the device is no longer within the control of an authorized user. The device may receive communications or generate an internal signal altering its functionality, such as instructing the device to enter a restricted use mode, a surveillance mode, to provide instructions to return the device and/or to prevent unauthorized use or unauthorized access to data. Additional embodiments also address methods and systems for gathering forensic data regarding an unauthorized user to assist in locating the unauthorized user and/or the device.

Claims

1. A method comprising:

detecting, by a mobile device, that a security compromise event has occurred; and

altering the function of the mobile device in response to said security compromise event to mitigate loss of control by the authorized user by presenting, by the mobile device an automated message to a current user of the mobile device, wherein the automated message comprises at least one of a notification;

that the current user may press any button to initiate contact with a security authority, wherein the security authority is an entity other than the owner of the mobile device and the authorized user of the mobile device;

that the mobile device has been lost or stolen;

that the current user of the mobile device should return the device;

commanding the current user to return the device;

that a reward is offered for the prompt return of the mobile device; and

regarding instructions informing the current user how to return the mobile device to an authorized user;

obtaining a theft notification record for the authorized user; and

contacting the authorized user by at least one of;

a phone call placed to a phone number specified in the theft notification record, whereupon audio instructions are provided to the authorized user regarding how to contact the current user of the mobile device to recover the mobile device; and

a text message sent electronically to an address specified in the theft notification record, whereupon textual instructions are provided to the authorized user regarding how to contact the current user of the mobile device to recover the mobile, device; and

a printed message sent by conventional mail to an address specified in the theft notification record, whereupon textual instructions are provided to the authorized user regarding how to contact the current user of the mobile device to recover the mobile device

wherein;

the address specified in the theft notification record is furnished by the authorized user during a registration process.

2. The method as disclosed in claim 1, wherein detecting, by the mobile device, that a security compromise event has occurred further comprises:

obtaining from the authorized user a set of criteria indicating unauthorized use of the mobile device; and

determining that at least one of the criteria indicating unauthorized use has occurred.

3. The method as disclosed in claim 2, wherein the criteria indicating unauthorized use of the mobile device comprise at least one of:

a maximum number of calls that may be placed to numbers not included in a pre-stored authorized number list;

a maximum number of calls that may be received by numbers not included in the pre-stored authorized number list; and

a call being placed to a country code not included in the pre-stored authorized number list.

4. The method as disclosed in claim 2, wherein the set of criteria indicating unauthorized use of the mobile device are stored in the mobile device.

5. The method as disclosed in claim 2, wherein the set of criteria indicating unauthorized use of the mobile device are stored in a database associated with the security authority.

6. The method as disclosed in claim 2, wherein altering the function of the mobile device further comprises inhibiting at least one function of the mobile device.

7. The method as disclosed in claim 1, wherein altering the function of the mobile device further comprises shutting down the mobile device.

8. The method as disclosed in claim 1, wherein altering the function of the mobile device further comprises commanding the mobile device to perform a destructive function that renders the mobile device inoperable.

9. The method as disclosed in claim 8, wherein commanding the mobile device to perform a destructive function that renders the mobile device inoperable further comprises executing an instruction by the mobile device that results in an integrated circuit within the mobile device becoming permanently inoperable.

10. The method as disclosed in claim 8, wherein commanding the mobile device to perform a destructive function that renders the mobile device inoperable further comprises executing an instruction by the mobile device that results in a fusible link being destroyed thereby rendering the mobile device at least temporarily inoperable.

11. The method as disclosed in claim 8, wherein commanding the mobile device to perform a destructive function that renders the mobile device inoperable further comprises executing an instruction by the mobile device that results in an internal circuit breaker in the mobile device being tripped thereby rendering the mobile device at least temporarily inoperable.

12. The method as disclosed in claim 1, wherein altering the function of the mobile device further comprises playing a pre-recorded message on a loudspeaker of the mobile device, wherein the pre-recorded message indicates the mobile device has been at least one of lost, stolen, or subject to unauthorized use.

13. The method as disclosed in claim 1, wherein altering the function of the mobile device further comprises presenting frequent audio messages prompting a current user of the mobile device to contact a security authority to initiate return of the mobile device to the authorized user.

14. The method as disclosed in claim 1, wherein altering the function of the mobile device further comprises playing through a loudspeaker of the device, a pre-recorded sound of a person screaming.

15. The method as disclosed in claim 1, wherein altering the function of the mobile device further comprises playing DTMF tones on a loudspeaker of the mobile device while the mobile device is in use.

16. The method as disclosed in claim 1, wherein altering the function of the mobile device further comprises allowing phone calls to be initiated only to one or more predetermined numbers within a contact list on the mobile device.

17. A method comprising:

providing, by a mobile device, instructions regarding how to return the mobile device to an authorized user, said instructions including a notification that the current user may press any button to initiate contact with a security authority, wherein the security authority is an entity other than the owner of the mobile device and the authorized user of the mobile device;

detecting, by the mobile device, that a security compromise event has occurred; and

altering the function of the mobile device in response to said security compromise event to mitigate loss of control by the authorized user by providing a notification that the current user may press any button to initiate contact with a security authority and further

by sending a message to the authorized user, the message comprising information selected from the group consisting of;

a phone number called by the mobile device;

a statement that the mobile device has been removed from a predetermined location;

a statement that the mobile device is in motion;

an alarm indicating the need for the authorized user to read a notification message; and

instructions to call a security authority to initiate a recovery process;

wherein altering the function of the mobile device further comprises commanding the mobile device to perform a destructive function that renders the mobile device inoperable, wherein the destructive function comprises executing an instruction by the mobile device that results in one of;

an integrated circuit within the mobile device becoming permanently inoperable;

a fusible link within the mobile device being destroyed; and

an internal circuit breaker in the mobile device being tripped.

18. The method as disclosed in claim 17, further comprising:

obtaining a theft notification record for the authorized user; and

contacting the authorized user by at least one of;

a phone call placed to a phone number specified in the theft notification record, whereupon audio instructions are provided to the authorized user regarding how to contact the current user of the mobile device to recover the mobile device; and

a text message sent electronically to an address specified in the theft notification record, whereupon textual instructions are provided to the authorized user regarding how to contact the current user of the mobile device to recover the mobile device; and

a printed message sent by conventional mail to an address specified in the theft notification record, whereupon textual instructions are provided to the authorized user regarding how to contact the current user of the mobile device to recover the mobile device

wherein;

the address specified in the theft notification record is furnished by the authorized user during a registration process.

19. The method as disclosed in claim 17, wherein detecting, by the mobile device, that a security compromise event has occurred further comprises:

obtaining from the authorized user a set of criteria indicating unauthorized use of the mobile device; and

determining that at least one of the criteria indicating unauthorized use has occurred.

20. The method as disclosed in claim 19, wherein the criteria indicating unauthorized use of the mobile device comprise at least one of:

a maximum number of calls that may be placed to numbers not included in a pre-stored authorized number list;

a maximum number of calls that may be received by numbers not included in the pre-stored authorized number list; and

a call being placed to a country code not included in the pre-stored authorized number list.

21. The method as disclosed in claim 19, wherein the set of criteria indicating unauthorized use of the mobile device are stored in the mobile device.

22. The method as disclosed in claim 19, wherein the set of criteria indicating unauthorized use of the mobile device are stored in a database associated with a security authority.

23. The method as disclosed in claim 19, wherein altering the function of the mobile device further comprises inhibiting at least one function of the mobile device.

24. The method as disclosed in claim 17, wherein altering the function of the mobile device further comprises at least one of:

presenting a message to return the device;

shutting down the mobile device;

presenting frequent audio messages prompting a current user of the mobile device to contact a security authority to initiate return of the mobile device to the authorized user

playing a pre-recorded message on a loudspeaker of the mobile device, wherein the pre-recorded message indicates the mobile device has been at least one of lost, stolen, or subject to unauthorized use;

playing through a loudspeaker of the device, a pre-recorded sound of a person screaming;

playing DTMF tones on a loudspeaker of the mobile device while the mobile device is in use; and

allowing phone calls to be initiated only to one or more predetermined numbers within a contact list on the mobile device.

25. A method comprising:

providing, by a mobile device, instructions regarding how to return the mobile device to an authorized user;

detecting, by the mobile device, that a security compromise event has occurred;

obtaining a theft notification record for the authorized user;

contacting the authorized user by at least one of;

a phone call placed to a phone number specified in the theft notification record, whereupon audio instructions are provided to the authorized user regarding how to contact the current user of the mobile device to recover the mobile device;

a text message sent electronically to an address furnished by the authorized user during a registration process and specified in the theft notification record, whereupon textual instructions are provided to the authorized user regarding how to contact the current user of the mobile device to recover the mobile device; and

a printed message sent by conventional mail to an address specified in the theft notification record, whereupon textual instructions are provided to the authorized user regarding how to contact the current user of the mobile device to recover the mobile device; and

altering the function of the mobile device in response to said security compromise event to mitigate loss of control by the authorized user by presenting, by the mobile device an automated message to a current user of the mobile device, wherein the automated message comprises a notification that the current user may press any button to initiate contact with a security authority.