Application-based security monitoring application
AssigneeT-Mobile USA, Inc.
InventorAhmad Arash OBAIDI
Life of this patent
Estimating the term…
Abstract
This disclosure describes techniques that enable a security monitoring application to detect the use of plaintext sensitive data by a user application on a user device. The security monitoring application may reside on a user device or may reside on a standalone device, such as a security monitoring controller, within an enterprise network. The security monitoring application may be configured to intercept a computing operation executed by a user application that includes user-plane data. In doing so, the security monitoring application may determine whether the user-plane data includes plaintext sensitive data and if so, quarantine the user-plane data.
Claims20
A user device, comprising:
- one or more processors;
- memory coupled to the one or more processors, the memory including one or more modules that are executable by the one or more processors to:
- intercept, at a security monitoring application, a computing operation executed by a user application, the computing operation including user-plane data;
- determine whether the user-plane data includes plaintext sensitive data;
- and
- in response to determining that the user-plane data includes the plaintext sensitive data, quarantine the user-plane data.
A security monitoring controller, comprising:
- one or more processors;
- memory coupled to the one or more processors, the memory including one or more modules that are executable by the one or more processors to:
- intercept, within a network, a computing operation executed via a user device that includes user-plane data;
- analyze the user-plane data to determine whether the user-plane data includes plaintext sensitive data;
- and
- in response to determining that the user-plane data includes the plaintext sensitive data, quarantining the user-plane data.
A computer-implemented method, comprising:
- under control of one or more processors:
- intercepting, via security monitoring application, a computing operation initiated by a user application, the computing operation involving user-plane data;
- determining that the user-plane data includes plaintext sensitive data;
- determining whether the user application is configured to support an encryption of the user-plane data;
- in response to the user application supporting the encryption of the user-plane data, encrypting the user-plane data to create encrypted user-plane data;
- and
- executing the computing operation using the encrypted user-plane data.
Dependencies are inferred from the claim text.