Limiting external device access to mobile computing devices according to device type and connection context

• US 9,077,756 B1
• Filed: 03/05/2012
• Issued: 07/07/2015
• Est. Priority Date: 03/05/2012
• Status: Active Grant

• Current Assignee: CA, Inc. (d/b/a CA Technologies) (Broadcom, Inc.)
• Original Assignee: Symantec Corporation (NortonLifeLock Inc.)
• Inventors: FitzGerald, Kelly
• Primary Examiner(s): Nalven, Andrew
• Assistant Examiner(s): MALINOWSKI, WALTER J
• Application Number:
  US13/412,588
• Time in Patent Office: 1,219 Days
• US Class Current: 1/1
• CPC Class Codes: H04L 63/102 Entity profiles
• CPC Class Codes: H04L 63/20 for managing network security; network security policies in general filtering policies H04L63/0227
• CPC Class Codes: H04W 12/08 Access security
• CPC Class Codes: H04W 12/71 Hardware identity
• CPC Class Codes: H04W 88/02 Terminal devices

Abstract

Access to a mobile computing device by a connected external device is limited, based on the context of the connection. The connection of the mobile computing device to an external device is detected. An identifier of the connected external device is gleaned, and the gleaned identifier is looked-up in a database of mappings between identifiers and descriptions of specific devices. The connected external device is classified as being of a specific functional category, based on the gleaned identifier and the description of the external device from the database. The functional category describes a legitimate function to be performed by the connected external device, such as data synchronizing, media playing or battery charging. The external device is provided with a level of access to the mobile computing device based on the classified functional category.

Claims

1. A computer implemented method for limiting access to a mobile computing device by a connected external device, the method comprising:

detecting that the mobile computing device has been physically coupled to an external USB device through a USB connection;

gleaning a USB identifier of the connected external USB device;

looking-up the gleaned USB identifier in a USB id repository that contains a mapping between the gleaned USB identifier and a textual description of the connected external USB device;

classifying the connected external USB device as being of a specific functional category, based on the textual description of the connected external USB device from the USB id repository;

responsive to classifying the connected external USB device as being of functional category battery charging, wherein the physical USB connection comprises two data pins, one power pin and one ground pin;

limiting access by the external USB device to the mobile computing device by one of;

blocking all communication activity on the two data pins of the physical USB connection; and

monitoring activity on the two data pins of the physical Universal Serial Bus (USB) connection while blocking data input/output but allowing a flow of electrons on the two data pins;

the method further comprising;

allowing a flow of electrons on the power pin.

2. The method of claim 1,

wherein limiting access by the external USB device to the mobile computing device comprises:

preventing the external USB device from writing to and reading from the mobile computing device; and

allowing the connected external USB device to transmit electrons to the mobile computing device.

3. The method of claim 1 further comprising:

storing the classification of the connected external USB device as being of a specific functional category;

subsequently to the mobile computing device being decoupled from the external USB device, detecting that the mobile computing device has been reconnected to the external USB device;

retrieving the stored classification of the connected external USB device as being of the specific functional category; and

providing the reconnected external USB device with a level of access to the mobile device based on the retrieved classification, without reclassifying the external USB device.

4. The method of claim 1 further comprising:

receiving input from a user of the mobile computing device concerning the classification of the connected external USB device;

in response to the received input from the user, modifying the classification.

5. The method of claim 1 further comprising:

receiving input from a user of the mobile computing device concerning the level of access to the mobile device to provide to the external USB device;

in response to the received input from the user, modifying the level of access.

6. At least one non-transitory computer readable medium storing a computer program product for limiting access to a mobile computing device by a connected external device, the computer program product comprising:

program code for detecting that the mobile computing device has been physically coupled to an external USB device through a USB connection;

program code for gleaning a USB identifier of the connected external USB device;

program code for looking-up the gleaned USB identifier in a USB id repository that contains a mapping between the gleaned USB identifier and a textual description of the connected external USB device;

program code for classifying the connected external device as being of a specific functional category, based on the textual description of the connected external USB device from the USB id repository;

program code for, responsive to classifying the connected external device as being of functional category battery charging, wherein the physical USB connection comprises a plurality of two data pins, one power pin and one ground pin;

program code for limiting access by the external device to the mobile computing device by one of;

blocking all communication activity on the two data pins of the physical USB connection; and

monitoring activity on the two data pins of the physical Universal Serial Bus (USB) connection while blocking data input/output but allowing a flow of electrons on the two data pins;

further comprising program code for allowing a flow of electrons on the power pin.

7. The computer program product of claim 6 wherein the program code for classifying the connected external USB device as being of a specific functional category, based on at least the gleaned identifier, further comprises:

program code for classifying the external USB device as being of a functional category from a group of functional categories consisting of;

     1) data synchronizing,

     2) media playing, and

     3) battery charging.

8. The computer program product of claim 6 further comprising:

program code for storing the classification of the connected external USB device as being of a specific functional category;

program code for subsequently to the mobile computing device being decoupled from the external USB device, detecting that the mobile computing device has been reconnected to the external USB device;

program code for retrieving the stored classification of the connected external USB device as being of the specific functional category; and

program code for providing the reconnected external USB device with a level of access to the mobile device based on the retrieved classification, without reclassifying the external USB device.

9. A mobile computing device comprising:

a processor;

computer memory;

at least one connection detecting module residing in the computer memory, for;

detecting that the mobile computing device has been physically coupled to an external USB device through a USB connection;

an identifier gleaning module residing in the computer memory, for gleaning a USB identifier of the connected external USB device;

an identifier looking-up module residing in the computer memory, for looking-up the gleaned USB identifier in a USB id repository that contains a mapping between the gleaned USB identifier and a textual description of the connected external USB device;

a device classifying module residing in the computer memory, for classifying the connected external USB device as being of a specific functional category, based on the textual description of the connected external USB device from the USB id repository;

an access providing module residing in the computer memory, for, responsive to classifying the connected external USB device as being of functional category battery charging, wherein the physical USB connection comprises two data pins, one power pin and one ground pin;

limiting access by the external USB device to the mobile computing device by one of;

blocking all communication activity on the two data pins of the physical USB connection; and

monitoring activity on the two data pins of the physical Universal Serial Bus (USB) connection while blocking data input/output but allowing a flow of electrons on the two data pins;

and

the access providing module further allowing a flow of electrons on the power pin.