Unified Mobile Security System and Method of Operation
AssigneeCarrier Iq, Inc.
InventorsDustin Michael Moore, R. Travis Jones, Bruce Blaine Lacey
Life of this patent
Estimating the term…
Abstract
A mobile secure agent on a wireless device executes one or more authenticated data collection profiles provisioned by a private profile producer. Each data package can only be transmitted to a collector certificated by the same private profile producer. Update profiles are signed and provisioned through a tunnel initiated from the mobile secure agent. A Certificate Authority provides libraries, anchors, and certificates in a key management message module to each mobile secure agent which enables revocation and replacement of certificates. Data stored in this way on a wireless device may only be transmitted in encrypted form to an authenticated destination.
Claims8
A method for operation of a mobile secure agent controlling a processor on a wireless mobile device,
- upon a condition in a profile evaluating as true,
- opening a secure SSL tunnel to a data package collector server using a certificate associated with the profile;
- encrypting a data package as specified in the profile;
- and
- transmitting the encrypted data package to the specified data package collector server having the associated certificate.
At a unified mobile security certificate authority apparatus, a method comprising:
- generating a plurality of trust anchors;
- receiving a plurality of certificates from private signing authorities and authenticating each one;
- and
- provisioning a plurality of mobile secure agents with trust anchors, cryptographic libraries, default profiles, and at least one signed certificate.
At a private profile producer apparatus, a method comprising:
- generating a certificate for authentication by a unified mobile security certificate authority;
- provisioning a data package collector with an authenticated certificate;
- distributing a certified profile update to a provisioner server;
- and
- directing a secure notifier apparatus to transmit a black short message system notification to a plurality of mobile secure agents to request an updated profile from the provisioner server.
A system communicatively coupled by a network comprising:
- a secure notifier apparatus configured to receive a direction from a private signing authority and as a result, transmit a black short message system to at least one mobile secure agent controlling a processor on a wireless mobile device;
- a certified profile update provisioner server configured to receive a certificate and an updated profile, receive a request for an SSL tunnel, authenticate the tunnel request using the certificate, and transmit a certified profile to a mobile secure agent;
- a certified data package collector configured to receive a certificate from a private signing authority,
- receive a request from a mobile secure agent for a secure channel,
- authenticate using the certificate, and
- receive encrypted data packages for storage.
Dependencies are inferred from the claim text.