DETECTING AND PREVENTING ILLICIT USE OF DEVICE

摘要

Illicit use of devices, and misappropriation of the data on those devices, may be prevented by detecting patterns of behavior that suggest illicit use, and by taking action when such illicit use is detected. A device may store information that describes suspicious patterns of use, and may also store information that describes normal patterns of use of known legitimate users. If current use of the device matches a suspicious pattern of use, and if the user of the device cannot be confirmed to be a known legitimate user, then action may be taken, such as locking the device's user interface, shutting down the device's communication facilities, issuing a warning message, sending a communication, or any other action.

主权项

1. A storage medium that is readable by a device and that stores executable instructions to secure said device, said executable instructions, when executed by said device, causing said device to perform acts comprising:
detecting that a first application on said device has been used in a way that is consistent with a known pattern of suspicious behavior or than a second application, which is in a category of applications not previously used by an authorized user of said device, has been downloaded to said device; and in response to said detecting, locking a user interface to prevent continued user interaction with said device, or disabling a communication facility of said device to prevent said device from communicating with devices outside of said device.