SYSTEM AND METHOD FOR CHANGING SECURITY BEHAVIOR OF A DEVICE BASED ON PROXIMITY TO ANOTHER DEVICE

• US 20140282877A1
• Filed: 03/12/2014
• Published: 09/18/2014
• Est. Priority Date: 03/13/2013
• Status: Active Grant

• Current Assignee: Lookout Incorporated
• Original Assignee: Lookout Incorporated
• Inventors: MAHAFFEY, Kevin Patrick, BUCK, Brian James
• Granted Patent: US 9,432,361 B2
• Time in Patent Office: Days
• US Class Current: 726/3
• CPC Class Codes: H04L 63/0853 using an additional device, e.g. smartcard, SIM or a different communication terminal cryptographic mechanisms or cryptographic arrangements for entity authentication involving additional secure or trusted devices H04L9/3234
• CPC Class Codes: H04L 63/0869 for achieving mutual authentication cryptographic mechanisms or cryptographic arrangements for mutual authentication H04L9/3273
• CPC Class Codes: H04L 63/0876 based on the identity of the terminal or configuration, e.g. MAC address, hardware or software configuration or device fingerprint
• CPC Class Codes: H04L 63/10 for controlling access to devices or network resources
• CPC Class Codes: H04L 63/107 wherein the security policies are location-dependent, e.g. entities privileges depend on current location or allowing specific operations only from locally connected terminals
• CPC Class Codes: H04L 63/18 using different networks or channels, e.g. using out of band channels cryptographic mechanisms or cryptographic arrangements for key distribution involving distinctive intermediate devices or communication paths H04L9/0827; cryptographic mechanisms or cryptographic arrangements for authentication using a plurality of channels H04L9/3215
• CPC Class Codes: H04W 12/08 Access security
• CPC Class Codes: H04W 12/30 Security of mobile devices; Security of mobile applications
• CPC Class Codes: H04W 12/33 using wearable devices, e.g. using a smartwatch or smart-glasses
• CPC Class Codes: H04W 12/50 Secure pairing of devices
• CPC Class Codes: H04W 12/63 Location-dependent; Proximity-dependent
• CPC Class Codes: H04W 12/64 using geofenced areas
• CPC Class Codes: H04W 84/18 Self-organising networks, e.g. ad-hoc networks or sensor networks
• CPC Class Codes: H04W 88/02 Terminal devices

Abstract

The security and convenience of a mobile communication device is enhanced based on a separate key device. If the key device is near the mobile communication device, the mobile communication device may be automatically unlocked without the user having to input an unlock code. The mobile communication device may be automatically unlocked into a first mode having a first level of functionality. If the user inputs a correct unlock code, the mobile communication device may be unlocked into a second mode having a second level of functionality, greater than the first level of functionality.

Claims

1. A method comprising:

while a mobile communication device is locked and connected to a network, detecting, by a proximity detection module in the mobile communication device, that a key device is connected to the same network as the mobile communication device;

in response to the mobile communication device and the key device being connected to the same network, unlocking, by a behavior modification module, the mobile communication device;

after the step of the unlocking, by the behavior modification module, the mobile communication device, determining that the mobile communication device and the key device remain connected to the same network; and

based on the determination, maintaining, by the behavior modification module, the mobile communication device in an unlocked state.

2. The method of claim 1 comprising:

detecting, by the proximity detection module, that the key device is no longer connected to the same network as the mobile communication device; and

in response to the key device no longer being connected to the same network, locking, by the behavior modification module, the mobile communication device.

3. The method of claim 1 comprising:

upon expiration of a time period of inactivity after which the mobile communication device will be locked, checking whether the key device is connected to the same network as the mobile communication device;

if the key device remains connected to the same network, not locking the mobile communication device; and

if the key device is no longer connected to the same network, locking the mobile communication device.

4. The method of claim 1 comprising:

after the step of unlocking the mobile communication device, periodically checking, by the proximity detection module, whether the key device is connected to the same network as the mobile communication device;

if a periodic check indicates that the key device is not connected to the same network as the mobile communication device, locking the target device; and

if the periodic check indicates that the key device is connected to the same network, not locking the mobile communication device.

5. The method of claim 1 wherein the key device comprises glasses.

6. The method of claim 1 wherein the step of unlocking the mobile communication device comprises unlocking the mobile communication device into a first mode having a first level of functionality, and the method comprises:

while the mobile communication device is in the first mode, receiving an unlock code;

if the unlock code is correct, unlocking the mobile communication device from the first mode to a second mode having a second level of functionality, greater than the first level of functionality; and

if the unlock code is incorrect, maintaining the first mode on the mobile communication device.

7. The method of claim 1 wherein the mobile communication device comprises an operating system.

8. The method of claim 1 wherein the step of detecting that the key device is connected to the same network as the mobile communication device comprises:

receiving a message broadcast from the key device, wherein the message comprises a Media Access Control (MAC) address that matches a MAC address stored at the mobile communication device.

9. The method of claim 1 wherein the step of detecting that the key device is connected to the same network as the mobile communication device comprises:

broadcasting a message from the mobile communication device over the network for the key device; and

receiving a reply from the key device responsive to the broadcasted message.

10. A method comprising:

determining, by a proximity detection module in a mobile communication device, whether a key device is near the mobile communication device; and

if the key device is not near the target device, allowing, by a behavior modification module in the mobile communication device, an unlock screen to be presented on an electronic display of the mobile communication device.

11. The method of claim 10 comprising:

if the key device is near the mobile communication device, bypassing the unlock screen.

12. The method of claim 11 wherein the step of bypassing the unlock screen comprises:

allowing a screen following an unlock code to be displayed on the electronic screen of the mobile communication device without the unlock code having been inputted to the mobile communication device.

13. The method of claim 10 comprising:

determining that the key device is near the mobile communication device;

after the determination, allowing the unlock screen to be presented on the electronic display of the mobile communication device;

receiving an unlock code input into the unlock screen;

if the unlock code is correct, unlocking the mobile communication device into a first mode based on the unlock code being correct and the key device being near the mobile communication device;

if the unlock code is incorrect, unlocking the mobile communication device into a second mode based on the unlock code being incorrect and the key device being near the mobile communication device,

wherein a level of functionality of the mobile communication device in the second mode is different from a level of functionality of the mobile communication device in the first mode.

14. The method of claim 13 wherein a number of functions available on the mobile communication device in the first mode is greater than a number of functions available on the mobile communication device in the second mode.

15. The method of claim 10 comprising:

determining that the key device is near the mobile communication device when the key device and the mobile communication device are connected to the same access point.

16. The method of claim 10 comprising:

determining that the key device is near the mobile communication device when a strength of a signal from the key device is above a threshold value.

17. The method of claim 10 comprising:

determining that the key device is near the mobile communication device when the key device and the mobile communication device are in the same geographical area.

18. A method comprising:

displaying on an electronic screen of a mobile communication device an unlock screen comprising an input box for an unlock code, and an option to check for a presence of a key device;

receiving a selection of the option;

checking, by a proximity detection module of the mobile communication device, for the presence of the key device;

if the presence of the key device is detected, unlocking the mobile communication device without receiving the unlock code; and

if the presence of the key device is not detected, not unlocking the mobile communication device.

19. The method of claim 18 wherein the step of unlocking the mobile communication device comprises:

unlocking the mobile communication device into a first mode having a first level of functionality;

while the mobile communication device is in the first mode, receiving the unlock code;

if the unlock code is correct, unlocking the mobile communication device from the first mode to a second mode having a second level of functionality, different from the first level of functionality; and

if the unlock code is incorrect, maintaining the first mode on the mobile communication device.

20. The method of claim 18 wherein the step of unlocking the mobile communication device comprises:

after expiration of a time period of inactivity after which the mobile communication device will be locked, checking whether the key device is near the mobile communication device;

if the key device is near the mobile communication device, not locking the mobile communication device; and

if the key device is no longer near the target device, locking the mobile communication device.