System and method for providing network security to mobile devices
AssigneeCUPP Computing AS
InventorShlomo Touboul
Life of this patent
Estimating the term…
Abstract
A small piece of hardware connects to a mobile device and filters out attacks and malicious code. Using the piece of hardware, a mobile device can be protected by greater security and possibly by the same level of security offered by its associated corporation/enterprise. In one embodiment, a mobile security system includes a connection mechanism for connecting to a data port of a mobile device and for communicating with the mobile device; a network connection module for acting as a gateway to a network; a security policy for determining whether to forward content intended for the mobile device to the mobile device; and a security engine for executing the security policy.
Claims20
A system, comprising:
- memory storing data transfer code,
- the data transfer code configured to be operated on a mobile device having at least one mobile device processor, mobile device memory and a mobile device data port, and
- the data transfer code including a redirector executable by the at least one mobile device processor, the redirector configured to redirect all network data received by the mobile device to a trusted security device before the network data is processed by the mobile device processor,
- the trusted security device including at least one security device processor, security device memory and a security device data port, the security device data port configured to couple to the mobile device data port, the at least one security device processor being different than the at least one mobile device processor, the security device memory including security code and a security policy thereon,
- the security code configured to receive particular network data from the redirector before the at least one mobile device processor processes the particular network data,
- the security code configured to evaluate the particular network data for malware as defined the security policy;
- and
- the security code configured to prevent at least a portion of the particular network data from being processed by the at least one mobile device processor or configured to modify at least a portion of the particular network data before being processed by the at least one mobile device processor, when the network data is determined to contain malware as defined by the security policy.
A security method, comprising:
- storing data transfer code,
- the data transfer code configured to be operated on a mobile device having at least one mobile device processor, mobile device memory and a mobile device data port, and
- the data transfer code including a redirector executable by the at least one mobile device processor, the redirector configured to redirect all network data received by the mobile device to a trusted security device before the network data is processed by the mobile device processor;
- transferring the data transfer code to the mobile device;
- receiving, by the trusted security device, particular network data from the redirector before the at least one mobile device processor processes the particular network data, the trusted security device including at least one security device processor, security device memory and a security device data port, the security device data port being coupled to the mobile device data port, the at least one security device processor being different than the at least one mobile device processor, the security device memory including security code and a security policy thereon,
- using the security code to evaluate the particular network data for malware as defined the security policy;
- and
- using the security code to prevent at least a portion of the particular network data from being processed by the at least one mobile device processor or to modify at least a portion of the particular network data before being processed by the at least one mobile device processor, when the network data is determined to contain malware as defined by the security policy.
Dependencies are inferred from the claim text.