Systems and methods for providing security services during power management mode

• US 9,843,595 B2
• Filed: 12/06/2016
• Issued: 12/12/2017
• Est. Priority Date: 08/04/2008
• Status: Active Grant

• Current Assignee: CUPP Computing AS
• Original Assignee: CUPP Computing AS
• Inventors: Touboul, Shlomo, Oz, Ami
• Primary Examiner(s): Zand, Kambiz
• Assistant Examiner(s): KAPLAN, BENJAMIN A
• Application Number:
  US15/371,164
• Publication Number:
  US 20170250996A1
• Time in Patent Office: 371 Days
• Field of Search: 726 23
• CPC Class Codes: G06F 1/3209 Monitoring remote activity, e.g. over telephone lines or network connections
• CPC Class Codes: G06F 21/56 Computer malware detection or handling, e.g. anti-virus arrangements
• CPC Class Codes: G06F 21/57 Certifying or maintaining trusted computer platforms, e.g. secure boots or power-downs, version controls, system software checks, secure updates or assessing vulnerabilities
• CPC Class Codes: G06F 2221/034 Test or assess a computer or a system
• CPC Class Codes: G06F 8/62 Uninstallation
• CPC Class Codes: H04L 63/0227 Filtering policies mail message filtering H04L51/212
• CPC Class Codes: H04L 63/0245 Filtering by information in the payload
• CPC Class Codes: H04L 63/14 for detecting or protecting against malicious traffic
• CPC Class Codes: H04L 63/1408 by monitoring network traffic monitoring network traffic per se H04L43/00
• CPC Class Codes: H04L 63/1425 Traffic logging, e.g. anomaly detection
• CPC Class Codes: H04L 63/20 for managing network security; network security policies in general filtering policies H04L63/0227
• CPC Class Codes: H04W 12/06 Authentication
• CPC Class Codes: H04W 12/062 Pre-authentication
• CPC Class Codes: Y02D 30/70 in wireless communication networks

Abstract

Systems and methods for providing security services during a power management mode are disclosed. In some embodiments, a method comprises detecting with a mobile security system a wake event on a mobile device, providing from the mobile security system a wake signal, the providing being in response to the wake event to wake a mobile device from a power management mode, and managing with the mobile security system security services of the mobile device. Managing security services may comprise scanning a hard drive of the mobile devices for viruses and/or other malware. Managing security services may also comprise updating security applications or scanning the mobile device for unauthorized data.

Claims

1. A security system, comprising:

security system memory;

a communication interface configured to communicate with a mobile device and configured to communicate over a network with a security administrator device, the mobile device including a mobile device processor and including a security agent configured to cooperate with the security system, the security administrator device having a security administrator processor different than the mobile device processor, the mobile device being remote from the security administrator device; and

a security system processor being different than the mobile device processor and different than the security administrator processor, the security system processor being configured to;

store in the security system memory at least a portion of wake code, the wake code being configured to detect a wake event and to send a wake signal to the mobile device in response to detecting the wake event, the security agent of the mobile device being configured to receive the wake signal, the security agent of the mobile device being configured to wake at least a portion of the mobile device from a power management mode in response to receiving the wake signal, the security agent of the mobile device being configured to perform security services after the at least a portion of the mobile device has been woken;

detect a particular wake event;

prepare a particular wake signal in response to detecting the particular wake event; and

send the particular wake signal to the mobile device in response to detecting the particular wake event, the security agent of the mobile device being configured to wake the at least a portion of the mobile device in response to receiving the particular wake signal and being configured to perform particular security services after the at least a portion of the mobile device has been woken.

2. The security system of claim 1, wherein the communication interface is configured to communicate with the mobile device via a wireless connection.

3. The security system of claim 1, wherein the communication interface is configured to communicate with the mobile device via an external port.

4. The security system of claim 1, wherein the communication interface is configured to communicate with the mobile device via an internal port.

5. The security system of claim 1, wherein the particular wake event includes at least receiving an alert from a security administrator and determining that the alert is authentic.

6. The security system of claim 1, wherein the particular wake event includes at least detecting that a predetermined time has elapsed.

7. The security system of claim 1, wherein the wake event includes at least detecting a predetermined clock time.

8. The security system of claim 1, wherein the particular wake event includes at least receiving an update file.

9. The security system of claim 1, wherein the performing the particular security services includes removing unauthorized data from the mobile device.

10. The security system of claim 1, wherein the performing the particular security services includes uninstalling applications from the mobile device.

11. The security system of claim 1, wherein the performing the particular security services includes re-imaging the mobile device.

12. The security system of claim 1, wherein the performing the particular security services includes sending log information to the security administrator device or another security administrator device.

13. The security system of claim 1, wherein the performing the particular security services includes performing a malware scan of the mobile device.

14. The security system of claim 1, wherein the performing the particular security services includes performing a data security scan of the mobile device.

15. The security system of claim 1, wherein the performing the particular security services includes performing a malware scan or a data security scan of one or more peripherals coupled to the mobile device.

16. A method, comprising:

storing in a security system memory of a security system at least a portion of wake code, the wake code being configured to detect a wake event and to send a wake signal to a mobile device in response to detecting the wake event, the mobile device including a security agent and a mobile device processor, the security agent of the mobile device being configured to receive the wake signal, the security agent of the mobile device being configured to wake at least a portion of the mobile device from a power management mode in response to receiving the wake signal, the security agent of the mobile device being configured to perform security services after the at least a portion of the mobile device has been woken, the security system including a security system processor different than the mobile device processor;

detecting, using the wake code and the security system processor, a particular wake event;

preparing, using the wake code and the security system processor, a particular wake signal to send to the mobile device in response to detecting the particular wake event; and

sending the particular wake signal to the mobile device, the security agent of the mobile device being configured to receive the particular wake signal, the security agent of the mobile device being configured to wake at least a portion of the mobile device from a power management mode in response to receiving the particular wake signal, the security agent of the mobile device being configured to perform particular security services after the at least a portion of the mobile device has been woken.

17. The method of claim 16, wherein the sending the particular wake signal to the mobile device comprises sending the particular wake signal to the mobile device via a wireless connection.

18. The method of claim 16, wherein the sending the particular wake signal to the mobile device comprises sending the particular wake signal to the mobile device via an external port.

19. The method of claim 16, wherein the sending the particular wake signal to the mobile device comprises sending the particular wake signal to the mobile device via an internal port.

20. The method of claim 16, wherein the particular wake event includes at least receiving an alert from a security administrator device and authenticating the alert, the security administrator device having a security administrator processor different than the mobile device processor and different than the security system processor, the mobile device being remote from the security administrator device.

21. The method of claim 16, wherein the detecting the particular wake event comprises detecting that a predetermined time has elapsed.

22. The method of claim 16, wherein the particular wake event includes at least detecting a predetermined clock time.

23. The method of claim 16, wherein the particular wake event includes at least receiving an update file.

24. The method of claim 16, wherein the performing the particular security services includes removing unauthorized data from the mobile device.

25. The method of claim 16, wherein the performing the particular security services includes uninstalling applications from the mobile device.

26. The method of claim 16, wherein the performing the particular security services includes re-imaging the mobile device.

27. The method of claim 16, wherein the performing the particular security services includes sending log information to a security administrator device.

28. The method of claim 16, wherein the performing the particular security services includes performing a malware scan of the mobile device.

29. The method of claim 16, wherein the performing the particular security services includes performing a data security scan of the mobile device.

30. The method of claim 16, wherein the performing the particular security services includes performing a malware scan or a data security scan of one or more peripherals coupled to the mobile device.