Unified mobile security system and method of operation
A mobile secure agent on a wireless device executes one or more authenticated data collection profiles provisioned by a private profile producer. Each data package can only be transmitted to a collector certificated by the same private profile producer. Update profiles are signed and provisioned through a tunnel initiated from the mobile secure agent. A Certificate Authority provides libraries, anchors, and certificates in a key management message module to each mobile secure agent which enables revocation and replacement of certificates. Data stored in this way on a wireless device may only be transmitted in encrypted form to an authenticated destination.
1. A system communicatively coupled by a network for transferring certificates and profiles to a wireless mobile device, the system comprising:
a secure notifier apparatus configured to receive a direction from a private signing authority and as a result, transmit a black short message system message to at least one mobile secure agent controlling a processor on a wireless mobile device;
a certified profile update provisioner server configured to receive a certificate and an updated profile from the private signing authority, receive a request for an SSL tunnel initiated by at least one mobile secure agent, authenticate the SSL tunnel request using the certificate, and transmit a certified profile to the at least one mobile secure agent;
a certified data package collector associated with a certified data package collector server, wherein the certified data package collector comprises a certificate from the private signing authority, and circuits to receive a request initiated by the at least one mobile secure agent for a secure channel, circuits to authenticate the certified data package collector using the certificate, and circuits to receive encrypted data packages for storage;
at least one private profile producer apparatus, communicatively coupled to a unified mobile security certificate authority apparatus, and further communicatively coupled to the secure notifier apparatus, the certified profile update provisioner server and to the certified data package collector server;
the unified mobile security certificate authority apparatus communicatively coupled to a plurality of mobile secure agents configured with cryptographic libraries, default profiles, a plurality of authentication anchors, and at least one certificate.
2. The system of claim 1 , wherein the certified profile transmitted to the at least one mobile secure agent includes the updated profile.
3. The system of claim 1 , wherein the black short message system message causes an update profile to be requested from the certified profile update provisioner server or causes a request for an update to a key management message module to be initiated.
4. The system of claim 1 , wherein the at least one private profile producer apparatus is not directly communicatively coupled to the at least one mobile secure agent.
5. The system of claim 1 , wherein the at least one mobile secure agent collects data included in the encrypted data packages according to the certified profile.
6. The system of claim 5 , wherein the encrypted data packages are transmitted to the certified data package collector only when conditions in the certified profile are satisfied.
7. The system of claim 1 , wherein the certified data package collector is only able to decrypt the encrypted data packages with an appropriate key associated with the certified profile.