System and method for remotely securing or recovering a mobile device

• US 8,467,768 B2
• Filed: 02/17/2009
• Issued: 06/18/2013
• Est. Priority Date: 02/17/2009
• Status: Active Grant

• Current Assignee: F-Secure Corporation (F-Secure Oyj)
• Original Assignee: Lookout Incorporated
• Inventors: Hering, John G., Bergess, James, Mahaffey, Kevin
• Primary Examiner(s): MIZRAHI, DIANE D
• Application Number:
  US12/372,719
• Publication Number:
  US 20100210240A1
• Time in Patent Office: 1,582 Days
• Field of Search: 455410-411, 455418-420
• US Class Current: 455/411
• CPC Class Codes: G06F 21/60 Protecting data
• CPC Class Codes: H04L 41/0233 Object-oriented techniques, for representation of network management data, e.g. common object request broker architecture [CORBA]
• CPC Class Codes: H04L 41/0253 using browsers or web-pages for accessing management information
• CPC Class Codes: H04L 41/026 using e-messaging for transporting management information, e.g. email, instant messaging or chat
• CPC Class Codes: H04L 41/22 comprising specially adapted graphical user interfaces [GUI]
• CPC Class Codes: H04L 43/0811 by checking connectivity
• CPC Class Codes: H04L 63/14 for detecting or protecting against malicious traffic
• CPC Class Codes: H04L 67/00 Network arrangements or protocols for supporting network services or applications user-to-user messaging H04L51/00; network arrangements, protocols or services for supporting real-time applications in data packet communications networks H04L65/00
• CPC Class Codes: H04W 12/08 Access security
• CPC Class Codes: H04W 12/12 Detection or prevention of fraud
• CPC Class Codes: H04W 12/126 Anti-theft arrangements, e.g. protection against subscriber identity module [SIM] cloning
• CPC Class Codes: H04W 12/30 Security of mobile devices; Security of mobile applications
• CPC Class Codes: H04W 12/63 Location-dependent; Proximity-dependent
• CPC Class Codes: H04W 4/021 Services related to particular areas, e.g. point of interest [POI] services, venue services or geofences
• CPC Class Codes: H04W 4/025 using location based information parameters
• CPC Class Codes: H04W 64/00 Locating users or terminals or network equipment for network management purposes, e.g. mobility management
• CPC Class Codes: H04W 8/245 from a network towards a terminal

Abstract

The present invention provides a system and method for remotely securing, accessing, and managing a mobile device or group of mobile devices. The invention enables a remote access web page to be generated by a server and displayed on a client computer. The server receives requested actions from the client computer and interacts with the mobile device to perform the actions. In the case of a lost or stolen device, the invention enables a user to take actions leading to the recovery or destruction of the device and data stored on it. The invention enables multiple types of remote access, including: locking the device, backing up data from the device, restoring data to the device, locating the device, playing a sound on the device, and wiping data from the device. The invention may be used to provide both self-help and administrator-assisted security for a device or group of devices.

Claims

1. A method for remote control of a target mobile communications device comprising:

at a server, processing authorization credentials received from a client computer user to determine whether the client computer user is authorized to access the server to issue a request for an action to be performed by the target mobile communications device;

at the server, and after processing of the authorization credentials, receiving a request for an action to be performed by the target mobile communications device, the request for the action received at the server from the authorized user accessing the server from the client computer;

transmitting a command from the server to the target mobile communications device, the command corresponding to the received request for the action to be performed by the target mobile communications device;

in response to the transmitted command, receiving at the server, information about the target mobile communications device;

interpreting the received information about the target mobile communications device to determine whether the transmitted command was performed or not performed by the target mobile communications device;

if the interpretation of the received information indicates that the command was performed by the target mobile communications device, providing a first notification from the server to the client computer that the command was performed, the notification formatted to populate a client computer web page containing a request for action status; and

if the interpretation of the received information indicates that the command was not performed by the target mobile communications device, providing a second notification from the server to the client computer that the command was not performed, the second notification formatted to populate a client computer web page containing a request for action status.

2. The method of claim 1, wherein the request for the action includes locking the target mobile communications device.

3. The method of claim 1, wherein the request for the action includes emitting a sound from the target mobile communications device.

4. The method of claim 1, wherein the request for the action includes backing up data stored on the target mobile communications device.

5. The method of claim 1, wherein the request for the action includes deleting data stored on the target mobile communications device.

6. The method of claim 1, wherein the request for the action includes two or more tasks selected from the group:

locking the target mobile communications device, emitting a sound, backing up data, deleting data and requesting a location and wherein the request for the action includes an order in which the two or more tasks are to be performed.

7. The method of claim 1, wherein the request for the action includes a request for a location of the target mobile communications device and the information includes location-related information of the target mobile communications device.

8. The method of claim 7, wherein the location of the target mobile communications device includes GPS coordinates for the target mobile communications device and information pertaining to a map related to the GPS coordinates which are transmitted by the server for display on the client computer.

9. The method of claim 7, wherein the information includes radio identification and signal information which indicate the location of the target mobile communications device.

10. A method for remotely determining a physical location of a target mobile communications device comprising:

at a server, processing authorization credentials received from a client computer user to determine whether the client computer user is authorized to access the server to issue a request for determining the physical location of the target mobile communications device;

at the server, and after processing of the authorization credentials, receiving a request to determine the physical location of the target mobile communications device from the authorized user accessing the server from the client computer;

transmitting a locate command from the server to the target mobile communications device, the locate command corresponding to the request to determine the physical location received from the authorized user; and

if the locate command was performed by the target mobile communications device, receiving at the server information concerning the physical location of the target mobile communications device; and

transmitting from the server to the client computer location information concerning the physical location of the target mobile communications device.

11. The method of claim 10 wherein (i) the transmitting a locate command includes the transmission of a plurality of locate commands over a time interval;

(ii) the receiving at the server information includes receiving a plurality of information concerning the physical location of the target mobile communications device; and

(iii) the transmitting from the server to the client computer location information includes a plurality of location information concerning the physical location of the target mobile communication device at the different times that the target mobile communications device was accessed during the time interval.

12. The method of claim 10 wherein the method further comprises, between the receiving at the server information concerning the physical location step and the transmitting from the server to the client computer location information step, the additional step of combining the information received at the server concerning the physical location of the target mobile communications device with target mobile communications device physical location data retrievable from the server to obtain the location information transmitted from the server to the client computer in the last step of the method.

13. A non-transitory computer-readable storage medium having stored thereon a plurality of instructions which, when executed by a processor, cause the processor to perform the steps of a method comprising:

at a server, processing authorization credentials received from a client computer user to determine whether the client computer user is authorized to access the server to issue a request for an action to be performed by the target mobile communications device;

at the server, and after processing of the authorization credentials, receiving a request for an action to be performed by the target mobile communications device, the request for the action received at the server from the authorized user accessing the server from the client computer;

transmitting a command from the server to the target mobile communications device, the command corresponding to the received request for the action to be performed by the target mobile communications device;

in response to the transmitted command, receiving at the server, information about the target mobile communications device;

interpreting the received information about the target mobile communications device to determine whether the transmitted command was performed or not performed by the target mobile communications device;

if the interpretation of the received information indicates that the command was performed by the target mobile communications device, providing a first notification from the server to the client computer that the command was performed, the notification formatted to populate a client computer web page containing a request for action status; and

if the interpretation of the received information indicates that the command was not performed by the target mobile communications device, providing a second notification from the server to the client computer that the command was not performed, the second notification formatted to populate a client computer web page containing a request for action status.

14. The non-transitory computer readable storage medium of claim 13 wherein the request for the action includes locking the target mobile communications device.

15. The non-transitory computer readable storage medium of claim 13, wherein the request for the action includes emitting a sound from the target mobile communications device.

16. The non-transitory computer readable storage medium of claim 13, wherein the request for the action includes backing up data stored on the target mobile communications device.

17. The non-transitory computer readable storage medium of claim 13, wherein the request for the action includes deleting data stored on the target mobile communications device.

18. The non-transitory computer readable storage medium of claim 13, wherein the request for the action includes two or more tasks selected from the group:

locking the target mobile communications device, emitting a sound, backing up data, deleting data and requesting a location and wherein the request for the action includes an order in which the two or more tasks are to be performed.

19. The non-transitory computer readable storage medium of claim 13, wherein the request for the action includes a request for a location of the target mobile communications device and the information includes location-related information of the target mobile communications device.

20. The non-transitory computer readable storage medium of claim 19, wherein the location of the target mobile communications device includes GPS coordinates for the target mobile communications device and information pertaining to a map related to the GPS coordinates which are transmitted by the server for display on the client computer.

21. The non-transitory computer readable storage medium of claim 19, wherein the information includes radio identification and signal information which indicate the location of the target mobile communications device.

22. The non-transitory computer readable storage medium of claim 19 wherein the method further comprises, between the receiving at the server information concerning the physical location step and the transmitting from the server to the client computer location information step, the additional step of combining the information received at the server concerning the physical location of the target mobile communications device with target mobile communications device physical location data retrievable from the server to obtain the location information transmitted from the server to the client computer in the last step of the method.

23. A non-transitory computer-readable storage medium having stored thereon a plurality of instructions which, when executed by a processor, cause the processor to perform the steps of a method comprising:

at a server, processing authorization credentials received from a client computer user to determine whether the client computer user is authorized to access the server to issue a request for determining the physical location of the target mobile communications device;

at the server, and after processing of the authorization credentials, receiving a request to determine the physical location of the target mobile communications device from the authorized user accessing the server from the client computer;

transmitting a locate command from the server to the target mobile communications device, the locate command corresponding to the request to determine the physical location received from the authorized user; and

if the locate command was performed by the target mobile communications device, receiving at the server information concerning the physical location of the target mobile communications device; and

transmitting from the server to the client computer location information concerning the physical location of the target mobile communications device.

24. The non-transitory computer readable storage medium of claim 23 wherein (i) the transmitting a locate command includes the transmission of a plurality of locate commands over a time interval;

(ii) the receiving at the server information includes receiving a plurality of information concerning the physical location of the target mobile communications device; and

(iii) the transmitting from the server to the client computer location information includes a plurality of location information concerning the physical location of the target mobile communication device at the different times that the target mobile communications device was accessed during the time interval.

25. A method for remotely determining a physical location of a target mobile communications device comprising:

at a server, processing authorization credentials received from a client computer user to determine whether the client computer user is authorized to access the server to request the determination of the physical location of the target mobile communications device;

at the server, and after processing of the authorization credentials, presenting a web page to the client computer to enable the authorized user to enter a request on the web page for the server to determine the physical location of the target mobile communications device;

at the server, receiving the request from the authorized user to determine the physical location of the target mobile communications device;

at the server, transmitting an indication message to the target mobile communication instructing the target mobile communications device to connect to the server;

after the target mobile communications device connects to the server, at the server, transmitting a command to determine the physical location of the target mobile communications device;

at the server, receiving information from the target mobile communications device concerning the physical location of the target mobile communications device;

at the server, reporting the physical location of the target mobile communications device by generating a second web page that contains the physical location, the second web page being accessible only to the client computer authorized user that requested the determination of the physical location.

26. The method of claim 25 wherein the method further comprises, between the receiving at the server information concerning the physical location step and the reporting step, the additional step of combining the information received at the server concerning the physical location of the target mobile communications device with target mobile communications device physical location data retrievable from the server to obtain the physical location for reporting in the last step of the method.

27. A non-transitory computer-readable storage medium having stored thereon a plurality of instructions which, when executed by a processor, cause the processor to perform the steps of a method comprising:

at a server, processing authorization credentials received from a client computer user to determine whether the client computer user is authorized to access the server to request the determination of the physical location of the target mobile communications device;

at the server, and after processing of the authorization credentials, presenting a web page to the client computer to enable the authorized user to enter a request on the web page for the server to determine the physical location of the target mobile communications device;

at the server, receiving the request from the authorized user to determine the physical location of the target mobile communications device;

at the server, transmitting an indication message to the target mobile communication instructing the target mobile communications device to connect to the server;

after the target mobile communications device connects to the server, at the server, transmitting a command to determine the physical location of the target mobile communications device;

at the server, receiving information from the target mobile communications device concerning the physical location of the target mobile communications device;

at the server, reporting the physical location of the target mobile communications device by generating a second web page that contains the physical location, the second web page being accessible only to the client computer authorized user that requested the determination of the physical location.

28. The non-transitory computer readable storage medium of claim 27 wherein the method further comprises, between the receiving at the server information concerning the physical location step and the reporting step, the additional step of combining the information received at the server concerning the physical location of the target mobile communications device with target mobile communications device physical location data retrievable from the server to obtain the physical location for reporting in the last step of the method.