Method for monitoring the unauthorized use of a device

• US 8,932,368 B2
• Filed: 09/03/2008
• Issued: 01/13/2015
• Est. Priority Date: 04/01/2008
• Status: Active Grant

• Current Assignee: Blancco Technology Group Ip Oy
• Original Assignee: Inhance Technology
• Inventors: Fitzgerald, William, Bermingham, Peter, Hannigan, Frank, Prendergast, Paul
• Primary Examiner(s): PYZOCHA, MICHAEL J
• Application Number:
  US12/203,832
• Publication Number:
  US 20090249497A1
• Time in Patent Office: 2,323 Days
• Field of Search: 726/35, 455/411
• US Class Current: 726/35
• CPC Class Codes: H04W 12/082 using revocation of authorisation
• CPC Class Codes: H04W 12/12 Detection or prevention of fraud
• CPC Class Codes: H04W 12/126 Anti-theft arrangements, e.g. protection against subscriber identity module [SIM] cloning
• CPC Class Codes: H04W 12/30 Security of mobile devices; Security of mobile applications
• CPC Class Codes: H04W 12/63 Location-dependent; Proximity-dependent
• CPC Class Codes: H04W 12/65 Environment-dependent, e.g. using captured environmental data
• CPC Class Codes: H04W 64/00 Locating users or terminals or network equipment for network management purposes, e.g. mobility management
• CPC Class Codes: H04W 8/183 Processing at user equipment or user record carrier

Abstract

The invention is directed to systems and methods for detecting the loss, theft or unauthorized use of a device and/or altering the functionality of the device in response. In one embodiment, a device monitors its use, its local environment, and/or its operating context to determine that the device is no longer within the control of an authorized user. The device may receive communications or generate an internal signal altering its functionality, such as instructing the device to enter a restricted use mode, a surveillance mode, to provide instructions to return the device and/or to prevent unauthorized use or unauthorized access to data. Additional embodiments also address methods and systems for gathering forensic data regarding an unauthorized user to assist in locating the unauthorized user and/or the device.

Claims

1. A method comprising:

providing, by a mobile device, a notification describing how to return the mobile device to an authorized user;

detecting, by the mobile device, that a security compromise event has occurred;

determining whether the function of the device should be altered in response to said security compromise event; and

wherein detecting, by the mobile device, that a security compromise event has occurred further comprises;

associating the mobile device with a companion device;

determining that the mobile device has been disassociated from the companion device by;

measuring a plurality of power levels of a wireless signal transmitted by the companion device;

computing an average power level from the plurality of measured power levels;

measuring a current power level of a wireless signal transmitted by the companion device; and

determining that the measured current power level has varied from the average power level by a predetermined amount; and

formatting a message for transmission to a security authority, the message comprising information regarding the disassociation of the mobile device with the companion device;

wherein the message is formatted by the companion device;

wherein the message is formatted by the companion device.

2. The method as disclosed in claim 1, wherein determining that the mobile device has been disassociated from the companion device comprises one of:

determining that the mobile device is unable to establish a communications link with the companion device; and

receiving, by the mobile device, a signal from the companion device, indicating that access to the mobile device should be restricted.

3. The method as disclosed in claim 1, wherein determining that the measured current power level has varied from the an average power level by a predetermined amount further comprises:

computing a standard deviation of the plurality of measured power levels; and

determining that the current power level exceeds an allowed signal range determined by a predetermined constant times the standard deviation of the plurality of measured signals.

4. The method as disclosed in claim 3, wherein the predetermined constant is claim 1.

5. A method comprising:

providing, by a mobile device, a notification describing how to return the mobile device to an authorized user;

detecting, by the mobile device, that a security compromise event has occurred;

determining whether the function of the device should be altered in response to said security compromise event; and

wherein detecting, by the mobile device, that a security compromise event has occurred further comprises;

associating the mobile device with a companion device;

determining that the mobile device has been disassociated from the companion device by;

measuring a plurality of power levels of a wireless signal transmitted by the companion device;

computing an average power level from the plurality of measured power levels;

measuring a plurality of current power levels of a wireless signal transmitted by the companion device; and

determining that for a predetermined number of times within a predetermined time period, one of the plurality of current power levels has varied from the average power level by a predetermined amount; and

formatting a message for transmission to a security authority, the message comprising information regarding the disassociation of the mobile device with the companion device;

wherein the message is formatted by the companion device.

6. The method as disclosed in claim 5, wherein determining that the mobile device has been disassociated from the companion device comprises one of:

determining that the mobile device is unable to establish a communications link with the companion device; and

receiving, by the mobile device, a signal from the companion device, indicating that access to the mobile device should be restricted.