Mobile Device Anomaly Detection via Sensor Monitoring
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Mobile devices are vulnerable to unauthorized actions such as unexpected calls or data transmissions due to malicious applications, which often deceive users into granting permissions, leading to financial losses and difficulties in recovering from remote jurisdictions.
Innovation Solution
A mobile device system that monitors physical conditions and device actions using sensors like accelerometers and pressure sensors, implementing an anomaly handling process to compare these conditions to a threshold value, triggering a user confirmation or alert if an anomaly is detected, thereby preventing unauthorized actions.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If the operating system allows applications to send SMS messages or place calls without strict restrictions, then legitimate applications can function properly, but malicious applications can perform unauthorized actions and cause financial loss
Solution Approach 1:
The system performs preliminary monitoring of physical conditions (device orientation, motion, pressure) before allowing SMS sending or call placement. By checking these conditions in advance, the system can detect anomalies that indicate malicious behavior and prevent unauthorized actions before they occur, while still allowing legitimate applications to function.
Solution Approach 2:
The system continuously monitors physical conditions and provides feedback by comparing current states against expected patterns. When anomalies are detected (such as unexpected device orientation or motion patterns), the system triggers alerts or blocks actions, creating a feedback loop that enhances security while maintaining legitimate application functionality.
2Reliability
If the system implements strict permission controls and requires user approval for each action, then security is improved, but user experience deteriorates due to frequent permission requests
Solution Approach 1:
The system performs self-monitoring of physical conditions and automatically detects anomalies without requiring continuous user intervention. The anomaly detection system works autonomously to identify suspicious patterns and trigger appropriate responses, reducing the need for frequent permission requests while maintaining security.
Solution Approach 2:
The physical condition monitoring system acts as an intermediary between the application and the user. Instead of directly prompting users for permission, the system uses environmental sensors to indirectly detect malicious behavior and only involves the user when anomalies are detected, thereby reducing unnecessary permission requests while maintaining security controls.
3Measurement precision
If the system monitors physical conditions and device actions continuously, then detection precision is improved, but energy consumption increases
Solution Approach 1:
The system implements periodic monitoring of physical conditions rather than continuous monitoring. Sensors are activated at intervals or triggered by specific events (such as before SMS sending or call placement), allowing the system to maintain detection precision for critical moments while reducing overall energy consumption during normal operation.
Solution Approach 2:
The system applies monitoring selectively to specific conditions and contexts rather than uniformly across all operations. Physical condition monitoring is intensified when suspicious patterns are detected or when high-risk actions are about to occur, while using minimal monitoring for low-risk scenarios, thereby optimizing the balance between detection precision and energy consumption.
Data Source
Figure 1
Figure 2A~2B
Figure 3
AI summary
Disclosed is an apparatus and method for a mobile device to detect unexpected behavior associated with the mobile device. The mobile device may include a memory and a processor coupled to the memory. The processor may be configured to monitor at least one of physical conditions and/or device actions associated with the mobile device. If a call or a data transmission is requested, the processor may be configured to compare the monitored physical conditions and/or device actions to an anomaly threshold value and may execute an anomaly exception routine if the anomaly threshold value is exceeded.