Secure forensic data collection on mobile devices
AssigneeModeOne Technologies Inc.
InventorsMatthew Rasmussen, Jason Purviance, Ryan Frye, William Baldisser
Life of this patent
Estimating the term…
Abstract
Embodiments of the inventive subject matter are directed to systems and methods designed to facilitate data collection from a target device. By installing software on a target device and then granting that application system-level access to the target device, embodiments of the inventive subject matter can safely, and cryptographically securely, grant access to files on the target device via uniquely generated uniform resource locators.
Claims20
A method for secure data collection from a mobile device, the method comprising:
- establishing, by a mobile device, a secure communication session with a remote server using a temporary authentication mechanism;
- enabling, by the remote server, selection of at least one data source on the mobile device for collection, wherein the selection is performed via a user interface accessible on a selection device that is distinct from the mobile device;
- generating, by the remote server, for each selected data source, a unique upload address that is cryptographically bound to both the secure communication session and the selected data source;
- transmitting, by the mobile device, data from each selected data source to the remote server using the unique upload address corresponding to the selected data source;
- and
- verifying, by the remote server, integrity and identity of the data received from the mobile device based on the cryptographic binding of the unique upload address.
A method for secure and selective data acquisition from a mobile device, the method comprising:
- receiving, by the mobile device, a request from a remote server to initiate a data collection session;
- establishing, by the mobile device, a temporary authenticated session with the remote server using a session-specific authentication token;
- presenting, by the mobile device, a list of available data sources to the remote server;
- receiving, by the mobile device, a selection of at least one data source from the remote server, wherein the selection is made via a user interface on a selection device that is distinct from the mobile device;
- generating, by the remote server, a unique upload address for each selected data source, wherein each unique upload address is cryptographically associated with the session-specific authentication token and an identifier of the selected data source;
- transmitting, by the mobile device, data from each selected data source to the remote server using a corresponding unique upload address;
- and
- verifying, by the remote server, that the data received from the mobile device corresponds to the selected data source and the session-specific authentication token.
A method for authenticated transfer of selected data from a mobile device, the method comprising:
- installing, by a user, a data collection application on a mobile device;
- requesting, by the data collection application, privileged access to a file system of the mobile device;
- generating, by a remote server, a temporary authentication credential in response to a request from the data collection application;
- authenticating, by the data collection application, a communication
- session with the remote server using the temporary authentication credential;
- enabling, by the remote server, a user to select at least one data source for collection from the mobile device via a user interface on a selection device that is separate from the mobile device;
- generating, by the remote server, a cryptographically unique upload address for each selected data source, wherein each cryptographically unique upload address is associated with the temporary authentication credential and an identifier of the selected data source;
- uploading, by the data collection application, data from each selected data source to the remote server using a corresponding cryptographically unique upload address;
- and
- validating, by the remote server, that the uploaded data matches the selected data source and the temporary authentication credential.
Dependencies are inferred from the claim text.