Disablement of lost or stolen device

• US 9,609,119 B2
• Filed: 05/23/2015
• Issued: 03/28/2017
• Est. Priority Date: 05/23/2015
• Status: Active Grant

• Current Assignee: Microsoft Technology Licensing LLC (Microsoft Corporation)
• Original Assignee: Microsoft Technology Licensing LLC (Microsoft Corporation)
• Inventors: Tucker, Nicholas Bradley
• Primary Examiner(s): MEHRA, INDER P
• Application Number:
  US14/720,765
• Publication Number:
  US 20160344862A1
• Time in Patent Office: 675 Days
• Field of Search: 340/12.22, 340/5.31, 340/568.1, 340/5.21, 455/411, 455/404.1, 455/410, 455/450, 726/35, 726/34
• US Class Current: 1/1
• CPC Class Codes: H04M 1/67 by electronic means
• CPC Class Codes: H04M 1/72463 to restrict the functionality of the device
• CPC Class Codes: H04W 12/08 Access security
• CPC Class Codes: H04W 12/082 using revocation of authorisation
• CPC Class Codes: H04W 12/126 Anti-theft arrangements, e.g. protection against subscriber identity module [SIM] cloning
• CPC Class Codes: H04W 12/37 Managing security policies for mobile devices or for controlling mobile applications
• CPC Class Codes: H04W 48/02 Access restriction performed under specific conditions

Abstract

The restricted use of a cellular network to facilitate disablement of a device that is suspected lost or stolen. Accordingly, even if the device is not capable of general use of the cellular network, disablement communications are still permitted across the cellular network. Accordingly, the device may receive a disable command from the disablement service over the cellular network, and acknowledge processing of the disable command to the disablement service also over the cellular network. Thus, efforts by an unauthorized possessor of the device to prevent disablement by removing the physical authentication module are thwarted. Likewise, turning the cellular service off using software settings at the device also does not prevent the device from being disabled via cellular network communication.

Claims

1. A computer-implemented method comprising:

receiving at a disablement service that communicates over a cellular network with a mobile device an indication that the mobile device has been lost or stolen;

transmitting over a cellular network a disable command to the mobile device, wherein the disable command is a disablement communication signal that is permitted for communication under restricted use of the cellular network even when cellular network connectivity to the mobile device has been disabled via software controls on the device or by removing a physical authentication card of the device;

receiving the disable command at the mobile device; and

performing a disable action on the mobile device in accordance with the received disable command.

2. The computer-implemented method of claim 1, further comprising transmitting over the cellular network to the disablement service a confirmation from the mobile device that the disable command was received, wherein the confirmation is configured for the restricted use of the cellular network.

3. The computer-implemented method of claim 2, wherein identifying at the disablement service an indication that the mobile device has been lost or stolen comprises:

determining at the mobile device that there is an indication that the mobile device has been lost or stolen;

transmitting over the cellular network a disable facilitation signal from the mobile device to the disablement service, wherein the disable facilitation signal is configured for restricted use of the cellular network even when cellular network connectivity to the mobile device has been disabled via software controls on the device or by removing a physical authentication card of the device;

receiving at the disablement service the disable facilitation signal; and

in response to receiving the disable facilitation signal, transmitting the disable command over the cellular network to the mobile device.

4. The computer-implemented method in accordance with claim 1, wherein the disable command is a software wipe command and wherein the disable action comprises removal of personal data and restoring the system of the mobile device to factory defaults.

5. The computer-implemented method in accordance with claim 1, wherein the disable command is a software downgrade command and wherein the disable action comprises performing a software downgrade on the mobile device.

6. The computer-implemented method in accordance with claim 1, wherein the disable command is a software removal command and wherein the dis able action comprises removal of specified software on the mobile device.

7. A computer program product comprising computer storage media storing executable instructions which, when executed by one or more processors, perform a computer-implemented method, and wherein the stored executable instructions cause the computer-implemented method to perform the following:

receive at a disablement service that communicates over a cellular network with a mobile device an indication that the mobile device has been lost or stolen;

transmit over a cellular network a disable command to the mobile device, wherein the disable command is a disablement communication signal that is permitted for communication under restricted use of the cellular network even when cellular network connectivity to the mobile device has been disabled via software controls on the device or by removing a physical authentication card of the device;

receive the disable command at the mobile device; and

perform a disable action on the mobile device in accordance with the received disable command.

8. The computer program product of claim 7, further comprising transmitting over the cellular network to the disablement service a confirmation from the mobile device that the disable command was received, wherein the confirmation is configured for the restricted use of the cellular network.

9. The computer program product of claim 8, wherein causing the method to identify at the disablement service an indication that the mobile device has been lost or stolen comprises:

determining at the mobile device that there is an indication that the mobile device has been lost or stolen;

transmitting over the cellular network a disable facilitation signal from the mobile device to the disablement service, wherein the disable facilitation signal is configured for restricted use of the cellular network even when cellular network connectivity to the mobile device has been disabled via software controls on the device or by removing a physical authentication card of the device;

receiving at the disablement service the disable facilitation signal; and

in response to receiving the disable facilitation signal, transmitting the disable command over the cellular network to the mobile device.

10. The computer program product in accordance with claim 7, wherein the disable command is a software wipe command and wherein the disable action comprises removal of personal data and restoring the system of the mobile device to factory defaults.

11. The computer program product in accordance with claim 7, wherein the disable command is a software downgrade command and wherein the disable action comprises performing a software downgrade on the mobile device.

12. The computer program product in accordance with claim 7, wherein the disable command is a software removal command and wherein the disable action comprises removal of specified software on the mobile device.

13. A computer environment system configured with an architecture comprising:

a disablement service that communicates over a cellular network with a mobile device and is configured to receive an indication that the mobile device has been lost or stolen;

a cellular network that is configured to transmit a disable command to the mobile device, wherein the disable command is a disablement communication signal that is permitted for communication under restricted use of the cellular network even when cellular network connectivity to the mobile device has been disabled via software controls on the device or by removing a physical authentication card of the device;

wherein the mobile device is configured to receive the disable command; and

wherein the mobile device is configured to perform a disable action on the mobile device in accordance with the received disable command.

14. The computer environment system of claim 13, wherein a confirmation from the mobile device is transmitted over the cellular network to the disablement service that the disable command was received, and wherein the confirmation is configured for the restricted use of the cellular network.

15. The computer environment system of claim 14, wherein configuring the disablement service to identify an indication that the mobile device has been lost or stolen comprises:

determining at the mobile device that there is an indication that the mobile device has been lost or stolen;

transmitting over the cellular network a disable facilitation signal from the mobile device to the disablement service, wherein the disable facilitation signal is configured for restricted use of the cellular network even when cellular network connectivity to the mobile device has been disabled via software controls on the device or by removing a physical authentication card of the device;

receiving at the disablement service the disable facilitation signal; and

in response to receiving the disable facilitation signal, transmitting the disable command over the cellular network to the mobile device.

16. The computer environment system in accordance with claim 13, wherein the disable command is a software wipe command and wherein the disable action comprises removal of personal data and restoring the system of the mobile device to factory defaults.

17. The computer environment system in accordance with claim 13, wherein the disable command is a software downgrade command and wherein the disable action comprises performing a software downgrade on the mobile device.

18. The computer environment system in accordance with claim 13, wherein the disable command is a software removal command and wherein the dis able action comprises removal of specified software on the mobile device.

19. The computer environment system in accordance with claim 13, wherein the disablement service comprises a cloud computing environment.

20. The computer environment system in accordance with claim 13, wherein the disablement service comprises a cluster of servers.

21. The computer environment system in accordance with claim 13, wherein the disablement service comprises a server.

22. The computer environment system in accordance with claim 13, further comprising a relevant decision module that determines whether general use of the cellular network is authorized.

23. The computer environment system in accordance with claim 22, wherein the relevant decision module comprises the cellular network comprises a cellular access management module at the cellular network that keeps track of whether the mobile device has general use authorization or restricted use authorization.

24. The computer environment system in accordance with claim 22, wherein the relevant decision module comprises a software module at the mobile device that, when activated, prohibits unrestricted use of the cellular network by the mobile device.