# US 9,439,074 B2 · Apparatus and methods for protecting data on a wireless device > Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt - Number: US 9,439,074 B2 - Document ID: US9439074B2 - Status: Granted - Kind: B2 - Application number: 14/504,255 - Filed: 2014-10-01 - Published: 2015-01-15 - Granted: 2016-09-06 - Earliest claimed: 2005-05-25 - Assignees: QUALCOMM Incorporated - Applicants: QUALCOMM Incorporated - Inventors: Sanjay K. Jha; Behrooz L. Abdi; Clifton E. Scott; Kenny K. Fok; Eric Chi Chung Yip; Tia M. Cassett - Web page: https://patentgrep.com/patent/US9439074B2 ## CPC - H04W 12/08: Access security - H04L 63/10: {for controlling access to devices or network resources} - H04M 1/72403: with means for local support of applications that increase the functionality - H04M 3/42178: {by downloading data to substation equipment} - H04W 88/02: Terminal devices - H04M 1/66: with means for preventing unauthorised or fraudulent calling (verifying user identity or authority in secret or secure digital communications H04L9/32) - H04W: WIRELESS COMMUNICATION NETWORKS (broadcast communication H04H; communication systems using wireless links for non-selective communication, e.g. wireless extensions H04M1/72) - H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M) - H04M: TELEPHONIC COMMUNICATION (circuits for controlling other apparatus via a telephone cable and not involving telephone switching apparatus G08) ## Abstract Apparatus, methods, and programs for protecting data on a wireless device may include a wireless device having a computer platform with a processing engine operable, based upon configurable parameters, to log data access attempt on the wireless device and transmit the log to a remote device. Furthermore, the wireless device may be configured to execute locally and remotely generated control commands on the wireless device, the commands operable to modify an operation of the wireless device. The embodiment may also include an apparatus operable to receive the transmitted log, analyze the received log and transmit a control command to the wireless device. The apparatus may further generate a data access report and make the report available to an authorized user. ## Claims ### Claim 1 A method of protecting data on a wireless device, comprising: receiving on a wireless device a monitoring and lock management configuration operable to configure the wireless device to monitor protected data stored thereon, the configuration including a predetermined tracking parameter; collecting data access information for a data access based on an execution of the configuration on the wireless device and based upon the predetermined tracking parameter; and determining whether or not the data access is authorized by one or more of (a) comparing a predetermined activity standard with the collected data access information at the wireless device or (b) transmitting the collected data access information to another device to compare the predetermined activity standard with the collected data access information. ### Claim 2 (depends on 1) The method of claim 1, wherein the lock management configuration is received over the wireless network. ### Claim 3 (depends on 1) The method of claim 1, further comprising: generating a control command based upon the comparison of the collected data access information with the predetermined activity standard. ### Claim 4 (depends on 1) The method of claim 1, further comprising: receiving a control command at the wireless device from the another device across the wireless network, wherein the control command is based upon the collected data access information; validating the control command at the wireless device; and executing the control command on the wireless device. ### Claim 5 (depends on 1) The method of claim 1, wherein the predetermined tracking parameter includes one or more of a time interval, a number of input and response sequences, a triggering event, or a predetermined time period of inactivity. ### Claim 6 A wireless device, comprising: means for receiving on a wireless device a monitoring and lock management configuration operable to configure the wireless device to monitor protected data stored thereon, the configuration including a predetermined tracking parameter; means for collecting data access information for a data access based on an execution of the configuration on the wireless device and based upon the predetermined tracking parameter; and means for determining whether or not the data access is authorized by one or more of (a) comparing a predetermined activity standard with the collected data access information at the wireless device or (b) transmitting the collected data access information to another device to compare the predetermined activity standard with the collected data access information. ### Claim 7 (depends on 6) The wireless device of claim 6, wherein the predetermined tracking parameter includes one or more of a time interval, a number of input and response sequences, a triggering event, or a predetermined time period of inactivity. ### Claim 8 A non-transitory computer-readable medium including instructions stored thereon, comprising: a first set of the instructions for receiving on a wireless device a monitoring and lock management configuration operable to configure the wireless device to monitor protected data stored thereon, the configuration including a predetermined tracking parameter; a second set of the instructions for collecting data access information for a data access based on an execution of the configuration on the wireless device and based upon the predetermined tracking parameter; and a third set of the instructions for determining whether or not the data access attempt is authorized by one or more of (a) comparing a predetermined activity standard with the collected data access information at the wireless device or (b) transmitting the collected data access information to another device to compare the predetermined activity standard with the collected data access information. ### Claim 9 (depends on 8) The non-transitory computer-readable medium of claim 8, wherein the predetermined tracking parameter includes one or more of a time interval, a number of input and response sequences, a triggering event, or a predetermined time period of inactivity. ### Claim 10 At least one processor configured to perform the actions of: receiving on a wireless device a monitoring and lock management configuration operable to configure the wireless device to monitor protected data stored thereon, the configuration including a predetermined tracking parameter; collecting data access information based for a data access on an execution of the configuration on the wireless device and based upon the predetermined tracking parameter; and determining whether or not the data access attempt is authorized by one or more of (a) comparing a predetermined activity standard with the collected data access information at the wireless device or (b) transmitting the collected data access information to another device to compare the predetermined activity standard with the collected data access information. ### Claim 11 (depends on 10) The at least one processor of claim 10, further configured to perform the action of receiving the lock management configuration over the wireless network. ### Claim 12 (depends on 10) The at least one processor of claim 10, further configured to perform the actions of: generating a control command based upon the comparison of the collected data access information with the predetermined activity standard. ### Claim 13 (depends on 10) The at least one processor of claim 10, further configured to perform the actions of: receiving a control command at the wireless device from another device across the wireless network, wherein the control command is based upon the collected data access information; validating the control command at the wireless device; and executing the control command on the wireless device. ### Claim 14 An apparatus for protecting data on a wireless device, comprising: a processor; a data manager module executable by the processor, the data manager comprising: an information repository operable to receive and store data access information collected from the wireless device for a data access based upon execution on the wireless device of a monitoring and lock management configuration, the configuration including a predetermined tracking parameter; an analyzer operable to determine whether or not the data access is authorized by comparing a predetermined activity standard with the collected data access information; and a remote device control module operable to generate and transmit a control command to the wireless device to change an operational characteristic of the wireless device based on the determination of whether or not the data access is authorized. ### Claim 15 (depends on 14) The apparatus of claim 14, wherein the data manager module further comprises a configuration generator operable to generate the monitoring and lock management configuration and transmit the configuration to the wireless device, the configuration defining data-related activities to record on the wireless device, wherein the data-related activities are associated with an access attempt to the protected data on the wireless device. ### Claim 16 (depends on 15) The apparatus of claim 15, wherein the configuration further comprises at least one of a reporting parameter, a predetermined activity standard or a control command parameter. ### Claim 17 (depends on 14) The apparatus of claim 14, wherein the data manager module is further operable to transmit the configuration across a wireless network. ### Claim 18 (depends on 14) The apparatus of claim 14, wherein the remote device control module is operable to receive and verify the control command from a remote apparatus. ### Claim 19 (depends on 18) The apparatus of claim 18, wherein the remote device control module is operable to verify the control command based on a user identification and at least one control permission. ### Claim 20 (depends on 14) The apparatus of claim 14, wherein the protected data comprises at least one of subscriber identification module (SIM) data, universal subscriber identification module (USIM) data, removable user identify module (RUIM) data, or a service programming code (SPC). ### Claim 21 (depends on 14) The apparatus of claim 14, wherein the control command comprises a command to disable the wireless device when at least one of the protected data is changed and a predetermined number of attempts to change protected data have been made. ### Claim 22 (depends on 14) The apparatus of claim 14, wherein the data manager module is further operable to perform at least one of transmitting the generated data access report and providing access to the generated data access report to a predetermined entity. ### Claim 23 (depends on 14) The apparatus of claim 14, wherein the data manager module is further operable to receive a control command from the predetermined entity based on the report. ### Claim 24 (depends on 14) The apparatus of claim 14, wherein the data manager module further comprises a configuration generator that sets the configuration based on receiving a selection of at least one of a plurality of predetermined parameters. ### Claim 25 (depends on 24) The apparatus of claim 24, wherein the predetermined parameters include at least one of a control command parameter, a tracking parameter, or a reporting parameter. ### Claim 26 (depends on 14) The apparatus of claim 14, wherein the control command comprises at least one of a user identifier or a control activity, wherein the device control module is operable to verify the at least one of the user identifier or the control activity portion of the control command. ### Claim 27 (depends on 14) The apparatus claim 14, wherein the predetermined tracking parameter includes one or more of a time interval, a number of input and response sequences, a triggering event, or a predetermined time period of inactivity. ### Claim 28 (depends on 14) The apparatus claim 14, wherein the analyzer is further operable to generate a data access report based on the data access information. ### Claim 29 An apparatus for protecting data on a wireless device, comprising: a processor; a data manager module executable by the processor, the data manager comprising: a configuration generator operable to generate a monitoring and lock management configuration and transmit the configuration to the wireless device, the configuration defining data-related activities to record on the wireless device associated with an access attempt to protected data on the wireless device; an information repository operable to receive and store data access information collected from the wireless device for a data access based upon execution on the wireless device of the monitoring and lock management configuration; an analyzer operable to generate a data access report based on the data access information; and a remote device control module operable to generate and transmit a control command to the wireless device to change an operational characteristic of the wireless device based on the data access report and the data access information.