Mobile Device Security System for Multi-Interface Threat Detection

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Mobile devices lack effective security measures to monitor and prevent attacks across multiple network interfaces and protocols, leading to vulnerabilities in data transmission and reception, and existing security systems are inadequate for providing continuous security status information and threat detection.

Innovation Solution

A system and method that analyzes network data on mobile devices to identify security threats across various interfaces and protocols, providing real-time security status information and enabling the rejection of malicious data while allowing safe data to pass through, using a cross-platform software architecture that integrates with multiple network protocols.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If security monitoring is implemented across multiple network interfaces and protocols, then security threat detection capability is improved, but device complexity increases

Engineering Contradiction:
Improvesecurity threat detection capabilityVSAvoidsystem complexity
Core Design Contradiction:
ReliabilityVSDevice complexity

Solution Approach 1:

The security system is divided into separate modules, each responsible for monitoring specific network interfaces or protocols. This segmentation allows the system to scale monitoring capabilities without requiring complete system redesign, managing complexity through modular architecture while maintaining comprehensive security coverage across multiple interfaces.

Inventive Principle:
Principle #1Segmentation

Solution Approach 2:

An intermediary security monitoring component is introduced that sits between the network interfaces/protocols and the core device systems. This mediator captures and analyzes security-relevant data from multiple sources without requiring deep integration into each interface's internal operations, thereby improving detection capability while containing complexity at the intermediary layer.

Inventive Principle:
Principle #24Intermediary (Mediator)

2Reliability

If continuous security status monitoring is provided, then security threat detection is improved, but energy consumption increases

Engineering Contradiction:
Improvecontinuous security status monitoringVSAvoidenergy consumption
Core Design Contradiction:
ReliabilityVSUse of energy by moving object

Solution Approach 1:

The security monitoring system operates using periodic sampling and event-triggered updates rather than continuous real-time monitoring. Security status is assessed at defined intervals or when specific security events occur, maintaining reliable security oversight while significantly reducing energy consumption compared to constant monitoring of all network traffic.

Inventive Principle:
Principle #19Periodic action

Solution Approach 2:

The system monitors only the most critical security parameters and high-risk network interfaces continuously, while applying less intensive monitoring to lower-risk areas. This partial monitoring approach focuses computational and energy resources on the most security-critical functions, achieving effective security monitoring with reduced overall energy consumption.

Inventive Principle:
Principle #16Partial or excessive action

Data Source

PatentUS11886232B2Providing a mobile communications device with access to a provider service conditioned upon a device security level determination
Publication Date: 2024.01.30 LOOKOUT INC
  • US11886232B2 patent drawing
  • US11886232B2 patent drawing
  • US11886232B2 patent drawing

AI summary

Methods and systems are provided for providing a mobile communications device with access to a provider with a plurality of security levels. The security state of the device varies according to severity levels of device security events. The mobile communications device generates data regarding security events and provides the data to the provider, which compares that security state to a policy associated with the provider. The mobile communications device is allowed to access to a provider service where the device's current security state meets or exceeds the security state required for the provider service.