# US 2014/0157355 A1 · Systems and methods for enhancing mobile device security with a processor trusted zone > Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt - Number: US 2014/0157355 A1 - Document ID: US20140157355A1 - Status: Published application - Kind: A1 - Application number: 13/922,673 - Filed: 2013-06-20 - Published: 2014-06-05 - Earliest claimed: 2012-01-06 - Assignees: Optio Labs, Inc. - Applicants: Optio Labs, LLC - Inventors: Thomas Charles Clancy, III; Christopher Jules White - Web page: https://patentgrep.com/patent/US20140157355A1 ## CPC - G06F 21/53: by executing in a restricted environment, e.g. sandbox or secure virtual machine - G06F 21/577: {Assessing vulnerabilities and evaluating computer system security} - G06F 21/71: to assure secure computing or processing of information - H04L 63/0227: {Filtering policies (mail message filtering H04L51/212)} - H04W 12/08: Access security - H04W 12/086: using security domains - G06F: ELECTRIC DIGITAL DATA PROCESSING (computer systems based on specific computational models G06N) - H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M) - H04W: WIRELESS COMMUNICATION NETWORKS (broadcast communication H04H; communication systems using wireless links for non-selective communication, e.g. wireless extensions H04M1/72) ## Abstract Methods and systems described herein relate to enhancing security on a mobile device. A method for enhancing mobile device security includes providing a trusted zone of a processor, and configuring various items in the trusted zone. Such items may include a specialized debugging interface; a remote auditing tool; an inter-process communication mechanism; a secure daemon; a package manager; a virtual machine, a configuration function, a device management system, touch screen management software, and a geo-localization function. ## Claims ### Claim 1 A method for enhancing mobile device security, the method comprising: providing a trusted zone of a processor; and configuring at least one of the following in the trusted zone of a processor to facilitate enhanced mobile device security: a specialized debugging interface; a remote auditing tool; an inter-process communication mechanism; a secure daemon; a package manager; a virtual machine; a configuration function; a device management system; a touch screen software; and a geo-localization function. ### Claim 2 (depends on 1) The method of claim 1, wherein at least one of file system components and USB I/O components of a specialized debugging interface are configured in the trusted zone of a processor. ### Claim 3 (depends on 1) The method of claim 1, wherein a specialized debugging interface in the trusted zone is enabled to provide at least one mechanism to perform at least one of auditing, configuring and controlling of at least one of the processes, file systems, and applications. ### Claim 4 (depends on 3) The method of claim 3, wherein a specialized debugging interface in the trusted zone is further enabled to provide the said at least one mechanism via USB, wireless or wired communication. ### Claim 5 (depends on 1) The method of claim 1, wherein a remote auditing tool in the trusted zone is enabled to provide at least one mechanism to perform at least one of auditing, configuring and controlling of at least one of the processes, file systems, and applications. ### Claim 6 (depends on 5) The method of claim 5, wherein the remote auditing tool is further enabled to provide the at least one mechanism via USB, wireless or wired communication. ### Claim 7 (depends on 1) The method of claim 1, wherein the method further comprises auditing the integrity of the mobile device via a remote computer. ### Claim 8 (depends on 1) The method of claim 1, wherein the method further comprises securely controlling at least one of the processing and configuration of the mobile device by a remote computer. ### Claim 9 (depends on 1) The method of claim 1, wherein the method further comprises at least one of intercepting, inspecting, blocking, filtering, and adapting communications between user-space applications and services via inter-process communication mechanisms in the trusted zone. ### Claim 10 (depends on 1) The method of claim 1, wherein the method further comprises at least one of installing, configuring, uninstalling, and responding to queries regarding application artifacts, configuration, and permissions by a package manager in the trusted zone. ### Claim 11 (depends on 1) The method of claim 1, wherein the method further comprises at least one of installing, configuring, uninstalling, and responding to queries regarding application artifacts, configuration, and permissions by a package manager in the trusted zone. ### Claim 12 (depends on 1) The method of claim 1, wherein configuring a virtual machine in the trusted zone comprises placing the virtual machine's instruction dispatching, virtual dispatch tables, socket and I/O code, file system interaction code, class bytecode caches, symbol tables, and class loading mechanisms in the trusted zone of the processor. ### Claim 13 (depends on 1) The method of claim 1, wherein configuring the configuration functions in the trusted zone comprises placing the I/O, reading, and interpretation of configuration data sources associated with the configuration functions in the trusted zone of the processor. ### Claim 14 (depends on 1) The method of claim 1, wherein the device management system is enabled to control policies governing one or more of the usage and security of the mobile device ### Claim 15 (depends on 1) The method of claim 1, wherein configuring the touch screen software in the trusted zone comprises placing one or more of the touch screen software event dispatching, shared memory reading/writing, inter-process communication dispatch, and intra-application dispatch code in the trusted zone of the processor. ### Claim 16 (depends on 1) The method of claim 1, wherein the geo-localization function may be enabled to provide a proximity detection function. ### Claim 17 (depends on 16) The method of claim 16, wherein the proximity detection function may be enabled to provide a proximity authentication function. ### Claim 18 A system for enforcing security of a mobile device, comprising: a processor enabled to provide a trusted zone enabled to execute a trusted application and a trusted inter-process communication bus, and an application zone enabled to execute an application and inter-process communication bus; and a hardware bus enabled to communicate with the inter-process communication bus and the trusted inter-process communication bus. ### Claim 19 (depends on 18) The system of claim 18, wherein the processor is a plurality of processors. ### Claim 20 (depends on 18) The system of claim 18, wherein the application is a plurality of applications. ### Claim 21 (depends on 18) The system of claim 18, wherein the trusted application is a plurality of trusted applications.