Lookout, Inc.

Other

Flexilis, Inc.

Kevin Patrick Mahaffey

Brian James Buck

James David Burgess

John Gunther Hering

David Luke Richardson

Timothy Micheal Wyatt

David Golombek

William Neil Robinson

Daniel Lee Evans

Anthony McKay Lineberry

Kyle Barton

Ariel Salomon

Jonathan Grubb

Ayan Kanti Mandal

Timothy Strazzere

Marc William Rogers

Cherry Mangat

Vance Grkov

Bruce Christopher Wootton

Matthew John Joseph LaMantia

Yogesh Swami

Matthew Robert Baker

Danielle Hewson Kingsley

Elaine P Teoh

Amit Gupta

Alex Cameron Abey

Emil Barker Ong

Aaron David Cockerill

Derek Joseph Halliday

Samuel Alexander Walker

Christopher Michael Jones

Daniel Thanos

Yuan Xie

Devesh Senapati

Tim Strazzere

Bruno Bergher

Kesava Abhinav Yerra

Abheek Gupta

Thomson Van Nguyen

James Bergess

Timothy Michael Wyatt

R Tyler Croy

Sergio Ivan Marcin Gorrino

Systems and methods are described for managing personal data on a client computer, in which personal data associated with the client computer is identified by a policy management module. An analysis may be performed for the client computer by a server using fake personal data. To identify applications which may attempt to access the personal data, the fake personal data is tracked for access on the client computer. A policy is then created that disallows access of the personal data by any applications identified by the analysis of the client computer as accessing the fake personal data. The policy is then assigned to the client computer.

Using fake personal data to create a policy to protect personal information on client computing devices

In one approach, a first computing device receives a request from a second computing device. The request is for access by the second computing device to a service provided by a third computing device over a network. In response to receiving the request, the first computing device performs a security evaluation of the second computing device. The evaluation determines a risk level. The first computing device generates, based on the evaluation, a token for the second computing device. The token includes data encoding the risk level. The token is sent to the second computing device and/or third computing device. The sent data is used to configure the service provided to the second computing device.

Configuring access to a network service based on a security state of a mobile device

The method disclosed herein provides for performing user authentication and maintaining user authentication and access to a second device based on the user maintaining control of a first device. The user's continued control may be based on determining the user's continued possession of the first device from the authentication to a pairing with the second electronic device which then causes a second security component executing on the second electronic device to change the second electronic device to an unlocked state.

Methods for managing user access to computing devices based on evaluation of authentication and maintenance of user control

The method disclosed herein provides for performing user authentication and maintaining user authentication and access to a first device based on the user maintaining control of the first device. The continued control may be based on determining the user's continued possession of the first device, or determining an acceptable proximity of the user to the first device. The proximity of the user may be determined using a second device associated with the user, or sensors associated with the first device.

Methods for maintaining user access to computing devices based on determining user control

Data is collected from a set of devices according to a data collection policy. The data is associated with at least one of: device configuration, device state, or device behavior. A norm is established using the collected data. A different data collection policy is established based on the norm. Data is collected from a particular device according to the different data collection policy. The norm is compared to the data collected from the particular device. If there is a deviation beyond a threshold deviation between the norm and the data collected from the particular device, a responsive action is taken.

Individual device response options from the monitoring of multiple devices

Systems and Computer Readable Media for enabling methods for multi-party authorization including a security component determining that a request for the performance of an action on a computing device is from a first party. The security component initiates transmissions to the computing device of first and second information indicating knowledge of first and second secrets provisioned on the computing device. The computing device, upon verifying the knowledge of first and second secrets, then permits the requested action.

System and computer readable media enabling methods for permitting a request after verifying knowledge of first and second secrets

Methods and systems are provided for providing a mobile communications device with access to a provider with a plurality of security levels. The security state of the device varies according to severity levels of device security events. The mobile communications device generates data regarding security events and provides the data to the provider, which compares that security state to a policy associated with the provider. The mobile communications device is allowed to access to a provider service where the device's current security state meets or exceeds the security state required for the provider service.

Providing a mobile communications device with access to a provider service conditioned upon a device security level determination

The invention is a system and method for identifying, assessing, and responding to vulnerabilities on a mobile communication device. Information about the mobile communication device, such as its operating system, firmware version, or software configuration, is transmitted to a server for assessment. The server accesses a data storage storing information about vulnerabilities. Based on the received information, the server may identify those vulnerabilities affecting the mobile communication device, and may transmit a notification to remediate those vulnerabilities. The server may also transmit result information about the vulnerabilities affecting the mobile communication device. The server may also store the received information about the device, so that in the event the server learns of new vulnerabilities, it may continue to assess whether the device is affected, and may accordingly notify or remediate the device. The server may provide an interface for an administrator to manage the system and respond to security issues.

System and method for determining the risk of vulnerabilities on a mobile communications device

An operating system monitors a computing device to determine that one or more events, including background activity, have occurred. In response to detecting the background activity, data associated with the background activity is automatically obtained from the computing device. An application is initiated on the operating system of the computing device, and the data is transmitted to the application.

Monitoring a computing device to automatically obtain data in response to detecting background activity

A method is provided for evaluating the usage of a mobile communications device that itself provides access to a resource. In the method, a detected usage of the mobile communications device is compared to a stored usage pattern of an authorized user. When a measure associated with the difference between the detected usage and the stored usage pattern exceeds a threshold, it is concluded that the mobile communications device is being used by an unauthorized user. In response to this conclusion, a restriction is placed on an ability of the mobile communications device to access the resource.

Methods and systems for addressing unreported theft or loss of mobile communications devices

A method for multi-party authorization includes a security component determining that a request for the performance of an action on a computing device is from a first party. The security component initiates transmissions to the computing device of first and second information indicating knowledge of first and second secrets provisioned on the computing device. The computing device, upon verifying the knowledge of first and second secrets, then permits the requested action.

System and method for permitting a request after verifying knowledge of first and second secrets

A method disclosed herein provides for pushing messages to a mobile communications device. An application on the mobile communications receives a pushed message including a set of instructions which when executed cause the mobile communications device to connect to an application server associated with the application executing on the mobile communications device. The pushed message is sent to the mobile communications device by a push mechanism that is one of a plurality of push mechanisms selected by a push service system in response to the push service system receiving a message send request from the application server. Once the mobile communications device is connected to the application server, the mobile communications device receives information messages from the application server.

System and method for pushing messages to a mobile communications device

Based on context received regarding a mobile communications device a server determines whether an existing network connection employed by the mobile communications device offers a level of security that is appropriate. When the server determines that the level of security is appropriate, the mobile communications device is allowed to continue using the network connection. Otherwise, the server directs the mobile communications device to terminate the network connection.

Methods and systems for providing a secure connection to a mobile communications device with the level of security based on a context of the communication

Software applications to be installed on user devices are monitored. Authenticity of the applications is evaluated using trust factors. In some cases, the trust factors relate to security associated with a network being accessed by a user device. In response to the evaluation, an action is performed such as configuring or disabling execution of one or more components of an application.

Evaluating authenticity of applications based on assessing user device context for increased security

Systems and methods enhance the security of an electronic device by causing an application on the device to intercept and analyze a communication. When the communication meets certain conditions an audio transmission is initiated. In the absence of the conditions the communication is passed to a different application.

Methods and systems for enhancing electronic device security by intercepting and analyzing a communication

Growing community of inventors

San Francisco, CA, United States of America

Kevin Patrick Mahaffey