Hierarchical data security measures for a mobile device
AssigneeSquare, Inc.
InventorsNathan McCauley, Bob Lee, Oliver S. C. Quigley, Eric Monti, Michael R. Lewis
Life of this patent
Estimating the term…
Abstract
Methods, systems, and apparatus, including computer programs encoded on a computer storage medium, for determining, at a remote computing device, whether a first security measure has been compromised, wherein the first security measure is executed on a mobile device; and based on a determination that the first security measure has been compromised, performing a corrective measure, wherein the corrective measure is performed after a delay.
Claims42
A computer-implemented method comprising:
- determining, by a computing device, that a first security measure has been compromised, including detecting a triggering feature of malicious software, wherein the first security measure is executed on a mobile device;
- determining, by the computing device, a corrective measure against the malicious software to be performed on the mobile device;
- calculating an amount of delay time for performing the corrective measure, the amount of delay time being configured to prevent identification, by a user using a temporal connection between the triggering feature and the corrective measure to determine a causal relationship between the triggering feature and the corrective measure, of the triggering feature of the malicious software from other features of the malicious software;
- and
- performing the corrective measure after the amount of delay time has passed since the triggering feature is detected,
- wherein actions including calculating the amount of delay time and performing the corrective measure after the amount of delay time are designated as removing temporal locality of the corrective measure from the triggering feature.
A non-transitory computer-readable medium having instructions stored thereon, which, when executed by a processor, cause the processor to perform operations comprising:
- determining that a first security measure has been compromised, including detecting a triggering feature of malicious software, wherein the first security measure is executed on a mobile device;
- determining a corrective measure against the malicious software to be performed on the mobile device;
- calculating an amount of delay time for performing the corrective measure, the amount of delay time being configured to prevent identification, by a user using a temporal connection between the triggering feature and the corrective measure to determine a causal relationship between the triggering feature and the corrective measure, of the triggering feature of the malicious software from other features of the malicious software;
- and
- performing the corrective measure after the amount of delay time has passed since the triggering feature is detected,
- wherein actions including calculating the amount of delay time and performing the corrective measure after the amount of delay time are designated as removing temporal locality of the corrective measure from the triggering feature.
A system comprising:
- a processor;
- and
- computer-readable medium coupled to the processor and having instructions stored thereon, which, when executed by the processor, cause the processor to perform operations comprising:
- determining that a first security measure has been compromised, including detecting a triggering feature of malicious software, wherein the first security measure is executed on a mobile device;
- determining a corrective measure against the malicious software to be performed on the mobile device;
- calculating an amount of delay time for performing the corrective measure, the amount of delay time being configured to prevent identification, by a user using a temporal connection between the triggering feature and the corrective measure to determine a causal relationship between the triggering feature and the corrective measure, of the triggering feature of the malicious software from other features of the malicious software;
- and
- performing the corrective measure after the amount of delay time has passed since the triggering feature is detected,
- wherein actions including calculating the amount of delay time and performing the corrective measure after the amount of delay time are designated as removing temporal locality of the corrective measure from the triggering feature.
Dependencies are inferred from the claim text.