Mobile Security Gateway Wake Control for Low-Power Malware Scanning
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Mobile devices and host devices are vulnerable to malicious code and data transfer when outside a trusted network, lacking a first line of defense and risking contamination of the trusted network upon reconnection, with existing security systems requiring significant CPU power and often running continuously, consuming energy and preventing device shutdown.
Innovation Solution
A mobile security system comprising a hardware device that connects to mobile devices, providing two lines of defense by acting as a mobile internet gateway, incorporating a security engine to enforce policies on data transfers, and supporting power management to manage security services, including scanning and updating.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If security systems run continuously to provide protection, then security reliability is improved, but energy consumption increases and device shutdown is prevented
Solution Approach 1:
The security system operates in periodic cycles, alternating between active scanning phases and low-power sleep phases. The system performs security scans at scheduled intervals rather than continuously, allowing the device to enter power management modes between scans, thus reducing energy consumption while maintaining security effectiveness.
Solution Approach 2:
The security system dynamically adjusts its operation mode based on device state. When the device is active, security services run normally; when the device enters power management mode, the security system detects this state and suspends or reduces its operations accordingly, creating a dynamic adaptation between security needs and power constraints.
2Reliability
If security scanning and updating are performed frequently, then security protection is improved, but CPU load increases preventing device shutdown
Solution Approach 1:
Security scans and updates are scheduled to run periodically at specific intervals rather than continuously. The system can configure scan frequencies and update schedules that balance security needs with device power consumption, allowing the CPU to remain idle or in low-power states between scheduled security operations.
Solution Approach 2:
The system performs preliminary assessments to determine when security scanning is actually needed, rather than scanning indiscriminately. It can check for security events, threats, or specific conditions that trigger scanning only when necessary, reducing unnecessary CPU load while maintaining adequate security protection.
3Adaptability or versatility
If mobile devices connect to untrusted networks outside enterprise network, then mobility and accessibility are improved, but vulnerability to malicious code increases
Solution Approach 1:
A security gateway or intermediary system is introduced between the mobile device and untrusted networks. This intermediary provides security services such as virus scanning, content filtering, and threat detection, allowing the device to access untrusted networks while protecting it from malicious code through the intermediary's security measures.
Solution Approach 2:
The security architecture is segmented into multiple layers: device-level security software, network-level security gateway, and enterprise-level security policies. This segmentation allows mobility to be maintained at the device level while security protection is distributed across multiple layers, with each layer handling specific security functions independently.
Data Source
AI summary
Systems and methods for providing security services during a power management mode are disclosed. In some embodiments, a method comprises detecting with a mobile security system a wake event on a mobile device, providing from the mobile security system a wake signal, the providing being in response to the wake event to wake a mobile device from a power management mode, and managing with the mobile security system security services of the mobile device. Managing security services may comprise scanning a hard drive of the mobile devices for viruses and/or other malware. Managing security services may also comprise updating security applications or scanning the mobile device for unauthorized data.