Power Trace Malware Detection in Charging Devices
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Malware attacks on wireless devices such as mobile phones pose a significant threat, as they can compromise secure information and disrupt device functionality, and existing methods lack effective real-time detection during charging processes.
Innovation Solution
An apparatus and method that utilize power monitoring circuitry in charging devices to obtain and analyze power traces during charging sessions, selecting specific tasks such as transactions, data uploads, or display activations to detect anomalies indicative of malware presence by comparing the power traces to stored data from healthy devices.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If power monitoring is performed during charging to detect malware, then malware detection capability is improved, but device complexity increases
Solution Approach 1:
The patent introduces an intermediary analysis system that receives power trace data from charging devices and performs malware detection externally. This separates the detection function from the user device, reducing device complexity while maintaining detection capability. The intermediary system processes power consumption patterns and compares them against known malware signatures without requiring modifications to the user device hardware.
Solution Approach 2:
The patent replaces traditional active scanning methods with passive power consumption analysis. Instead of actively testing device functionality or installing detection software, the system passively monitors electrical power traces during normal charging operations. This substitution reduces device complexity by eliminating the need for additional sensors, actuators, or software components on the user device.
2Measurement precision
If tasks are performed during charging to generate power traces, then detection precision is improved, but loss of time increases
Solution Approach 1:
The patent performs malware detection during the charging process itself, utilizing the time when the device is already connected to power. By selecting tasks that can be executed during charging (such as background data synchronization or application updates), the system gathers detection data without requiring separate dedicated scanning time, thus not extending the overall device availability cycle.
Solution Approach 2:
The patent maintains continuous operation by performing detection activities during the charging process rather than interrupting normal device usage. The power trace analysis occurs continuously or periodically during charging, allowing the device to remain in its intended charging state while simultaneously undergoing security inspection, thereby eliminating wasted time.
3Reliability
If power traces are analyzed in real-time during charging, then reliability of detection is improved, but use of energy increases
Solution Approach 1:
The patent extracts the computationally intensive power trace analysis function from the user device and relocates it to an external charging device or cloud-based analysis system. This extraction allows real-time monitoring with high reliability while minimizing the energy burden on the user device, as the processing occurs externally using the charging infrastructure's computational resources.
Solution Approach 2:
The patent implements selective task execution during charging based on predefined criteria such as charging rate, battery state, or detected anomalies. Instead of continuously performing all possible detection tasks, the system activates only the necessary subset of monitoring activities, reducing overall energy consumption while maintaining sufficient detection reliability for the current charging context.
Data Source
AI summary
Examples of the disclosure can provide an apparatus for detecting malware. The apparatus can comprise means for: selecting one or more tasks to be performed by a user device during charging of the user device; enabling a power trace to be obtained wherein the power trace provides an indication of the power consumed by the user device while the one or more tasks are being performed; and enabling the power trace to be analysed to provide an indication of the presence of malware.