System and method for automatically altering device functionality

• US 7,996,906 B2
• Filed: 11/06/2009
• Issued: 08/09/2011
• Est. Priority Date: 07/28/2005
• Status: Active Grant

• Current Assignee: Alcatel-Lucent SA (Nokia Corporation)
• Original Assignee: Mformation Technologies Incorporated
• Inventors: Nath, Badri, Kushwaha, Rakesh, Edwards, Mark
• Primary Examiner(s): Zand, Kambiz
• Assistant Examiner(s): TABOR, AMARE F
• Application Number:
  US12/613,641
• Publication Number:
  US 20100069040A1
• Time in Patent Office: 641 Days
• Field of Search: 726/23, 726/24, 455/410, 455/418
• US Class Current: 726/24
• CPC Class Codes: G06F 21/305 by remotely controlling device operation
• CPC Class Codes: G06F 21/56 Computer malware detection or handling, e.g. anti-virus arrangements
• CPC Class Codes: H04L 63/126 the source of the received data
• CPC Class Codes: H04L 63/145 the attack involving the propagation of malware through the network, e.g. viruses, trojans or worms
• CPC Class Codes: H04W 12/08 Access security
• CPC Class Codes: H04W 12/12 Detection or prevention of fraud
• CPC Class Codes: H04W 12/37 Managing security policies for mobile devices or for controlling mobile applications
• CPC Class Codes: H04W 8/22 Processing or transfer of terminal data, e.g. status or physical capabilities
• CPC Class Codes: H04W 8/24 Transfer of terminal data

Abstract

A system and method for automatically altering device functionality based on the occurrence of certain predetermined conditions. A link may be established between a device and a trusted server to provide an association between various conditions that may be detected at the device and actions that are to be taken on the device. In particular, software traps can be set up and linked to device functionality such that execution of the trap may automatically disable or enable certain device capabilities. Some aspects of the invention are directed to a system and method for remotely setting software traps for detecting software viruses and, upon execution of the traps, several methods for establishing a quarantine on infected devices.

Claims

1. A method of automatically altering functionality of a wireless device in response to occurrence of a condition, the method comprising acts of:

receiving a link command that specifies the condition and the functionality of the wireless device to be altered;

determining, responsive to receipt of the link command, whether a device software module of a plurality of device software modules installed on the wireless device is capable of altering the functionality of the wireless device;

determining, responsive to a determination that a device software module of the plurality of device software modules is installed on the wireless device that is capable of altering the functionality of the wireless device, an identifier of the device software module installed on the wireless device that is capable of altering the functionality of the wireless device;

installing a software trap on the wireless device, the software trap being configured to transfer control to the device software module that is capable of altering the functionality of the wireless device;

linking, on the wireless device, an identifier of the software trap to the identifier of the device software module capable of altering the functionality of the wireless device;

detecting, on the wireless device and subsequent to the acts of installing and linking, the occurrence of the condition; and

executing the software trap on the wireless device solely in response to the act of detecting to automatically alter the functionality of the wireless device without any input from a user of the wireless device;

wherein occurrence of the condition includes detection of a virus on the wireless device; and

wherein altering the functionality of the wireless device includes establishing a quarantine on the wireless device.

2. The method as claimed in claim 1, wherein altering the functionality of the wireless device includes disabling access to at least one hardware resource of the wireless device.

3. The method as claimed in claim 1, further comprising authenticating the link command on the wireless device to verify that the link command is received from a trusted source prior to the acts of installing and linking.

4. The method as claimed in claim 3, wherein authenticating the link command includes comparing a signature accompanying the link command with a stored signature corresponding to the trusted source.

5. The method as claimed in claim 1, wherein establishing a quarantine includes at least one of disabling inputs to the wireless device, disabling outputs from the wireless device, isolating infected programs on the wireless device and scrubbing wireless device software.

6. A system for automatically altering specified functionality of a wireless device in response to occurrence of a condition, the system comprising:

a device agent installed on the wireless device;

a plurality of device software modules installed on the wireless device, each of the plurality of device software modules being capable of altering functionality of the wireless device; and

a software trap installed on the wireless device and configured to transfer control to at least one of the plurality of device software modules solely in response to detection of the occurrence of the condition by the wireless device;

anti-virus software installed on the wireless device;

wherein the device agent is constructed and arranged to;

receive a link command that identifies the condition and the specified functionality of the wireless device to be altered in response to occurrence of the condition;

determine, responsive to receipt of the link command, whether a device software module of the plurality of device software modules is capable of altering the specified functionality of the wireless device;

determine, responsive to a determination that a device software module of the plurality of device software module is installed on the wireless device that is capable of altering the specified functionality of the wireless device, an identifier of the device software module installed on the wireless device that is capable of altering the specified functionality of the wireless device; and

link, on the wireless device, the identifier of the device software module that is installed on the wireless device and capable of altering the specified functionality of the wireless device to an identifier of the trap so that execution of the trap automatically alters the specified functionality of the wireless device without any input from a user of the wireless device;

wherein the condition includes detection of a virus by the anti-virus software.

7. The system as claimed in claim 6, wherein the specified functionality of the wireless device includes access to at least one hardware resource of the wireless device.

8. The system as claimed in claim 6, further comprising a management server constructed and arranged to supply the link command to the device agent.

9. The system as claimed in claim 6, wherein the device agent is constructed and arranged to send a message to the management server upon execution of the trap in response to the detection of the virus;

and wherein the message includes an indication of device software that has been infected by the virus.

10. The system as claimed in claim 6, wherein the device agent is further constructed and arranged to authenticate the link command on the wireless device to verify that the link command is received from a trusted source prior to linking the identifier of the device software module to the identifier of the trap.

11. The system as claimed in claim 6, wherein the wireless device is a mobile wireless device.

12. A system for automatically altering specified functionality of a wireless device in response to occurrence of a condition, the system comprising:

a plurality of device software modules installed on the wireless device, each of the plurality of device software modules being capable of altering functionality of the wireless device;

a software trap installed on the wireless device and configured to transfer control to at least one of the plurality of device software modules solely in response to detection of the occurrence of the condition by the wireless device;

anti-virus software installed on the wireless device;

means, installed on the wireless device, for receiving a link command that identifies the condition and the specified functionality of the wireless device to be altered in response to occurrence of the condition, for determining, responsive to receipt of the link command, whether a device software module of the plurality of device software modules is capable of altering the specified functionality of the wireless device, for determining, responsive to a determination that a device software module of the plurality of device software module is installed on the wireless device that is capable of altering the specified functionality of the wireless device, an identifier of the device software module installed on the wireless device that is capable of altering the specified functionality of the wireless device, and for linking the identifier of the device software module that is installed on the wireless device and capable of altering the specified functionality of the wireless device to an identifier of the trap on the wireless device-so that execution of the trap automatically alters the specified functionality of the wireless device without any input from a user of the wireless device;

wherein the condition includes detection of a virus by the anti-virus software.

13. The system as claimed in claim 12, wherein the wireless device is a mobile wireless device.