Methods and Systems for Automated Anonymous Crowdsourcing of Characterized Device Behaviors
    101.
    发明申请
    Methods and Systems for Automated Anonymous Crowdsourcing of Characterized Device Behaviors 审中-公开
    自动匿名特征化设备行为的方法与系统

    公开(公告)号:US20160277435A1

    公开(公告)日:2016-09-22

    申请号:US14661195

    申请日:2015-03-18

    Abstract: Methods, and devices implementing the methods, use device-specific classifiers in a privacy-preserving behavioral monitoring and analysis system for crowd-sourcing of device behaviors. Diverse devices having varying degrees of “smart” capabilities may monitor operational behaviors. Gathered operational behavior information may be transmitted to a nearby device having greater processing capabilities than a respective collecting device, or may be transmitted directly to an “always on” device. The behavior information may be used to generate behavior vectors, which may be analyzed for anomalies. Vectors containing anomaly flags may be anonymized to remove any user-identifying information and subsequently transmitted to a remote recipient such as a service provider or device manufacture. In this manner, operational behavior information may be gathered about different devices from a large number of users, to obtain statistical analysis of operational behavior for specific makes and models of devices, without divulging personal information about device users.

    Abstract translation: 方法和实现方法的设备在隐私保护行为监控和分析系统中使用设备特定的分类器,用于人群来源的设备行为。 具有不同程度的“智能”能力的不同装置可以监视操作行为。 聚集的操作行为信息可以被发送到具有比相应的收集装置更大的处理能力的附近设备,或者可以直接传送到“始终处于”设备。 行为信息可用于生成行为矢量,可以对异常进行分析。 可以对包含异常标志的向量进行匿名处理,以消除任何用户识别信息,并随后发送到诸如服务提供商或设备制造的远程接收者。 以这种方式,可以从大量用户收集关于不同设备的操作行为信息,以获得关于特定设备和型号的操作行为的统计分析,而不泄漏关于设备用户的个人信息。

    On-Device Behavioral Analysis To Detect Malfunction Due To RF Interference
    102.
    发明申请
    On-Device Behavioral Analysis To Detect Malfunction Due To RF Interference 审中-公开
    用于检测RF干扰引起的故障的设备上行为分析

    公开(公告)号:US20160242050A1

    公开(公告)日:2016-08-18

    申请号:US14620341

    申请日:2015-02-12

    Abstract: Systems, methods, and devices of the various aspects enable detecting a malfunction caused by radio frequency (RF) interference. A computing device processor may identify a location of the computing device based on a plurality of real-time data inputs received by the computing device. The processor may characterize an RF environment of the computing device based on the identified location and the plurality of real-time data inputs. The processor may determine at least one RF emissions threshold based on the characterization of the RF environment. The processor may compare the characterization of the RF environment to the at least one RF emissions threshold, and may perform an action in response to determining that the characterization of the RF environment exceeds the at least one RF emissions threshold.

    Abstract translation: 各方面的系统,方法和装置能够检测由射频(RF)干扰引起的故障。 计算设备处理器可以基于由计算设备接收的多个实时数据输入来识别计算设备的位置。 处理器可以基于所识别的位置和多个实时数据输入来表征计算设备的RF环境。 处理器可以基于RF环境的表征来确定至少一个RF发射阈值。 处理器可以将RF环境的特征与至少一个RF发射阈值进行比较,并且可以响应于确定RF环境的表征超过至少一个RF辐射阈值来执行动作。

    Determining Model Protection Level On-Device based on Malware Detection in Similar Devices
    103.
    发明申请
    Determining Model Protection Level On-Device based on Malware Detection in Similar Devices 审中-公开
    在类似设备中基于恶意软件检测确定型号防护等级设备

    公开(公告)号:US20160232353A1

    公开(公告)日:2016-08-11

    申请号:US14616794

    申请日:2015-02-09

    CPC classification number: G06F21/566 G06F21/552 G06F21/56 G06F21/564

    Abstract: Methods, systems and devices for identifying, classifying, modeling, and responding to mobile device behaviors may include using lightweight processes to monitor and analyze various conditions and device behaviors to detect an instance of a non-benign behavior, increasing a level of security or scrutiny to identify other instances of non-benign behavior, and notifying select computing devices of the increased security risk so that they may also increase their security/scrutiny levels. For example, a computing device may be configured to perform a first type of analysis operations (e.g., lightweight analysis operations) to determine whether there is an increased security risk, and perform a second type of analysis operations (e.g., robust analysis operations) in response to determining that there is an increased security risk to determine whether there are additional security risks that are different from the security risk detected via the performance of the first type of analysis operations.

    Abstract translation: 用于识别,分类,建模和响应移动设备行为的方法,系统和设备可能包括使用轻量级进程监视和分析各种条件和设备行为,以检测非良性行为的实例,增加安全级别或审查 识别非良性行为的其他情况,并通知选择计算设备增加的安全风险,使其也可以增加其安全性/审查级别。 例如,计算设备可以被配置为执行第一类型的分析操作(例如,轻量级分析操作)以确定是否存在增加的安全风险,并且执行第二类型的分析操作(例如,稳健的分析操作) 确定确定是否存在增加的安全风险以确定是否存在不同于通过执行第一类型的分析操作而检测到的安全风险的附加安全风险。

    RTT PROCESSING BASED ON A CHARACTERISTIC OF ACCESS POINTS
    104.
    发明申请
    RTT PROCESSING BASED ON A CHARACTERISTIC OF ACCESS POINTS 有权
    基于访问点特征的RTT处理

    公开(公告)号:US20160150374A1

    公开(公告)日:2016-05-26

    申请号:US15010984

    申请日:2016-01-29

    Abstract: Systems, apparatus and methods for estimating a location of a mobile device are presented. Before computing a location estimate, the mobile device groups a plurality of access points into two or more categories (for example, a first list of access points having a first characteristic and a second list of access points having a second characteristic). Round-trip time (RTT) measurements are computed for access points in the first list. A Short Interframe Space (SIFS) value may be determined for each access point in the first list or generally SIFT representing the first list as a whole. The RTT measurements are compensated with the appropriate SIFS value. The mobile device then computes its location or position fix estimate using the compensated RTT values while excluding less accurate RTT values from other access points. As a result, the location estimate eliminates adverse influent from some access points.

    Abstract translation: 提出了用于估计移动设备的位置的系统,装置和方法。 在计算位置估计之前,移动设备将多个接入点分组为两个或多个类别(例如,具有第一特征的接入点的第一列表和具有第二特征的接入点的第二列表)。 对第一个列表中的接入点计算往返时间(RTT)测量。 可以为第一列表中的每个接入点确定短帧间间隔(SIFS)值,或者一般地,SIFT表示整个第一列表。 RTT测量用适当的SIFS值补偿。 移动设备然后使用补偿的RTT值来计算其位置或位置固定估计,同时从其他接入点排除较不准确的RTT值。 因此,位置估计消除了一些接入点的不利影响。

    Pre-identifying probable malicious rootkit behavior using behavioral contracts
    105.
    发明授权
    Pre-identifying probable malicious rootkit behavior using behavioral contracts 有权
    使用行为契约预先识别可能的恶意rootkit行为

    公开(公告)号:US09323929B2

    公开(公告)日:2016-04-26

    申请号:US14090200

    申请日:2013-11-26

    CPC classification number: G06F21/56 G06F21/566

    Abstract: The various aspects provide for a computing device and methods implemented by the device to ensure that an application executing on the device and seeking root access will not cause malicious behavior while after receiving root access. Before giving the application root access, the computing device may identify operations the application intends to execute while having root access, determine whether executing the operations will cause malicious behavior by simulating execution of the operations, and pre-approve those operations after determining that executing those operations will not result in malicious behavior. Further, after giving the application root access, the computing device may only allow the application to perform pre-approved operations by quickly checking the application's pending operations against the pre-approved operations before allowing the application to perform those operations. Thus, the various aspects may ensure that an application receives root access without compromising the performance or security integrity of the computing device.

    Abstract translation: 各种方面提供了一种计算设备和由设备实现的方法,以确保在接收根访问之后在设备上执行并寻求root访问的应用不会引起恶意行为。 在给予应用程序根访问之前,计算设备可以识别应用程序在具有root访问的同时执行的操作,确定执行操作是否会通过模拟操作的执行而导致恶意行为,并且在确定执行这些操作之后预先批准这些操作 操作不会导致恶意行为。 此外,在给予应用程序根访问之后,计算设备可以仅允许应用程序通过在允许应用程序执行这些操作之前快速检查应用程序针对预先批准的操作的待处理操作来执行预先批准的操作。 因此,各个方面可以确保应用程序接收根访问,而不会影响计算设备的性能或安全完整性。

    RTT processing based on a characteristic of access points
    107.
    发明授权
    RTT processing based on a characteristic of access points 有权
    基于接入点特性的RTT处理

    公开(公告)号:US09253599B1

    公开(公告)日:2016-02-02

    申请号:US14464458

    申请日:2014-08-20

    Abstract: Systems, apparatus and methods for estimating a location of a mobile device are presented. Before computing a location estimate, the mobile device groups a plurality of access points into two or more categories (for example, a first list of access points having a first characteristic and a second list of access points having a second characteristic). Round-trip time (RTT) measurements are computed for access points in the first list. A Short Interframe Space (SIFS) value may be determined for each access point in the first list or generally SIFT representing the first list as a whole. The RTT measurements are compensated with the appropriate SIFS value. The mobile device then computes its location or position fix estimate using the compensated RTT values while excluding less accurate RTT values from other access points. As a result, the location estimate eliminates adverse influent from some access points.

    Abstract translation: 提出了用于估计移动设备的位置的系统,装置和方法。 在计算位置估计之前,移动设备将多个接入点分组为两个或多个类别(例如,具有第一特征的接入点的第一列表和具有第二特征的接入点的第二列表)。 对第一个列表中的接入点计算往返时间(RTT)测量。 可以为第一列表中的每个接入点确定短帧间间隔(SIFS)值,或者一般地,SIFT表示整个第一列表。 RTT测量用适当的SIFS值补偿。 移动设备然后使用补偿的RTT值来计算其位置或位置固定估计,同时从其他接入点排除较不准确的RTT值。 因此,位置估计消除了一些接入点的不利影响。

    Adaptive passive scanning and/or active probing techniques for mobile device positioning
    109.
    发明授权
    Adaptive passive scanning and/or active probing techniques for mobile device positioning 有权
    用于移动设备定位的自适应被动扫描和/或主动探测技术

    公开(公告)号:US09229092B2

    公开(公告)日:2016-01-05

    申请号:US14327430

    申请日:2014-07-09

    CPC classification number: G01S5/0289 G01S5/14 G01S13/876 H04W64/00

    Abstract: Various methods, apparatuses and/or articles of manufacture are provided which may be implemented to support mobile device positioning through the use of adaptive passive scanning and/or adaptive active probing techniques. For example, a mobile device may acquire signals from wireless transceivers, identify wireless transceivers based, at least in part, on the acquired signal(s), determine a received signal strength measurement for each of the wireless transceivers based, at least in part, on the acquired signal(s), and determine a transmission power of a probe signal to be transmitted to at least one of the wireless transceivers based, at least in part, on at least one of the received signal strength measurements.

    Abstract translation: 提供各种方法,装置和/或制品,其可以被实现以通过使用自适应被动扫描和/或自适应主动探测技术来支持移动设备定位。 例如,移动设备可以至少部分地基于所获取的信号从无线收发器获取信号,识别无线收发器,至少部分地基于无线收发器确定每个无线收发器的接收信号强度测量, 并且至少部分地基于所接收的信号强度测量中的至少一个来确定要发送到至少一个无线收发器的探测信号的发射功率。

Patent Agency Ranking