Hardware Asset Tracking for Mobile Device Security
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing mobile device solutions fail to effectively identify and address the complex factors contributing to performance degradation over time, as they often rely on computationally intensive scanning engines that consume resources and are limited to detecting known viruses and malware, neglecting other factors that can impact mobile device performance and power utilization.
Innovation Solution
A comprehensive behavioral monitoring and analysis system that includes a hardware component configured to monitor key assets at a low level, detecting suspicious activities on a data bus and generating behavior signatures to classify software applications as malicious or benign, allowing for real-time identification and response to performance-degrading behaviors without excessive resource consumption.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If computationally intensive scanning engines are used to detect viruses and malware, then detection capability is improved, but resource consumption increases
Solution Approach 1:
The patent segments the monitoring task by introducing a dedicated hardware component (trace module) that operates independently from the main processor. This hardware module captures trace information from data buses and memory interfaces directly, separating the data collection function from the analysis function. The processor then receives pre-processed trace data rather than raw system states, reducing its computational burden while maintaining comprehensive monitoring capability.
Solution Approach 2:
The patent introduces trace information as an intermediary data structure that bridges the gap between hardware operations and software analysis. The trace module converts raw bus transactions and memory accesses into structured trace records that are easier to analyze. This intermediary representation reduces the complexity of detection algorithms and enables more efficient processing by the processor.
2Measurement precision
If comprehensive behavioral monitoring is implemented to detect all performance-degrading factors, then detection accuracy is improved, but device complexity increases
Solution Approach 1:
The patent divides the monitoring system into distinct functional segments: a hardware trace module that captures low-level system events, a processor that analyzes trace information, and a database that stores behavioral patterns. This segmentation allows each component to specialize in specific tasks, improving overall detection accuracy without requiring every component to be overly complex.
Solution Approach 2:
The trace module operates autonomously, continuously capturing trace information from data buses and memory interfaces without requiring processor intervention. The system self-monitors its own operations, automatically generating trace data that reflects actual system behavior. This self-service capability enables comprehensive monitoring while keeping the processor free for other tasks.
3Speed
If real-time monitoring of key assets is performed to prevent malicious activities, then response speed is improved, but processing overhead increases
Solution Approach 1:
The patent performs preliminary action by continuously capturing and storing trace information in real-time before malicious activities can cause significant harm. The trace module records all data bus transactions and memory accesses as they occur, creating a complete audit trail. This pre-captured data is then analyzed by the processor, enabling rapid detection and response to suspicious patterns without requiring continuous high-power processing during normal operation.
Solution Approach 2:
The system implements periodic analysis of trace information rather than continuous high-intensity processing. The processor periodically examines accumulated trace data for suspicious patterns, allowing the system to maintain low power consumption during intervals between analysis cycles while still providing timely detection of malicious activities through the continuously operating hardware trace module.
Data Source
AI summary
Mobile computing devices may be equipped with hardware components configured to monitor key assets of the mobile device at a low level (e.g., firmware level, hardware level, etc.). The hardware component may also be configured to dynamically determine the key assets that are to be monitored in the mobile device, monitor the access or use of these key assets by monitoring data flows, transactions, or operations in a system data bus of the mobile device, and report suspicious activities to a comprehensive behavioral monitoring and analysis system of the mobile device. The comprehensive behavioral monitoring and analysis system may then use this information to quickly identify and respond to malicious or performance degrading activities of the mobile device.