US 2014/0004829 A1 · MOBILE DEVICE AND METHOD TO MONITOR A BASEBAND PROCESSOR IN RELATION TO THE ACTIONS ON AN APPLICATON PROCESSOR

Abstract

A method and device to analyze the security of a mobile terminal having application and baseband processors are described. Various information may be acquired by baseband and application monitor applications running on the mobile device including, for example, information about transmission channels, protocol transmissions, and/or data transmission volumes. Information about power consumption may also be acquired. The monitor applications may also measure response times to service requests as well as monitor various aspects of running applications including status, time/duration, inputs or outputs, and/or inputs from a user via a User-Interface. Information may also be acquired about the configuration of the audio path to determine which component or application is using the microphone.

Claims30

Dependent claims

Method for detecting an attack on a baseband processor of a mobile device which comprises the baseband processor and an application processor, which may or may not be integrated in a single chip, comprising the steps:

a) monitoring by a baseband monitor component the behavior of the baseband processor by using features available on the respective mobile device,
b) monitoring by an application monitor component the behavior of the application processor by keeping a record of the parameters, execution time or execution duration of legitimate software or user activities on the application processor that cause normal baseband activities as intended by the user;
c) correlating by an evaluator component the baseband processor behavior with application processor behavior in order to distinguish between legitimate and suspicious/illegitimate baseband activities,
d) initiation by a defense component of countermeasures designed to ward off the suspicious/illegitimate baseband activities.

1 more element

Mobile device configured to detect an attack on a baseband processor comprising a baseband processor and an application processor, which may or may not be integrated in a single chip, comprising:

a) baseband monitor component configured to monitor the behavior of the baseband processor by using features available on the respective mobile device,
b) application monitor component configured to monitor the behavior of the application processor by keeping a record of the parameters, execution time or execution duration of legitimate software or user activities on the application processor that cause normal baseband activities as intended by the user;
c) evaluator component configured to correlate the baseband processor behavior with application processor behavior in order to distinguish between legitimate and suspicious/illegitimate baseband activities,
d) defense component configured to initiate component of countermeasures designed to ward off the suspicious/illegitimate baseband activities.

1 more element

Dependencies are inferred from the claim text.

Mobile device and method to monitor a baseband processor in relation to the actions on an applicaton processor

Life of this patent

Mobile device and method to monitor a baseband processor in relation to the actions on an applicaton processor

Life of this patent

Abstract

Claims30