System and method for responding to aggressive behavior associated with wireless devices
An embodiment of the invention describes a wireless device comprising a Subscriber Identity Module (SIM) further comprising a memory for storing program code for performing a plurality of operations, and a processor for processing the program code to execute the plurality of operations, the operations including receiving over-the-air instructions via a wireless network from a control center to create a rules set in the SIM, wherein the rules set defines an acceptable behavior of the wireless device, monitoring requests from a wireless modem of the wireless device for access files stored in the SIM, detecting an aggressive behavior of the wireless device based on the rules set, and blocking the wireless modem from generating traffic in the wireless network.
1. A wireless device comprising:
a wireless modem; and
a Subscriber Identity Module (SIM) comprising:
a memory for storing program code for performing a plurality of operations, SIM access files, and a rules set that defines an aggressive behavior of the wireless device; and
a processor for processing the program code to execute the plurality of operations, the operations including:
monitoring requests from the wireless modem for accesses to SIM access files stored in the SIM;
detecting the aggressive behavior of the wireless device based on the rules set, the aggressive behavior is present when the wireless device repeatedly retries to perform a network signaling in a time frame such that a threshold for the retries is exceeded, wherein the rules set specifies the number of successive accesses allowed for one or more SIM access files, and the length of a disabling period when the aggressive behavior of the wireless device is detected; and
blocking the wireless modem from generating network signaling in the wireless network, wherein blocking the wireless modem comprises invalidating one or more of the SIM access files that are accessed by the wireless modem when the wireless modem generates network signaling.
2. The wireless device of claim 1 , wherein the rules set specifies the number of successive accesses allowed for one or more SIM access files, and the length of disabling period when the aggressive behavior of the wireless device is detected.
3. The wireless device of claim 1 , wherein the SIM access files stored in the SIM includes an Elementary File that store an International Mobile Subscriber Identity (IMSI) of the wireless device.
4. The wireless device of claim 1 wherein detecting an aggressive behavior further comprises: issuing a command from the program code in the SIM to the wireless modem to obtain an error code indicating a cause of error in a wireless connection of the wireless device.
5. The wireless device of claim 1 , further comprising;
performing a self-certification process by the wireless device to obtain a signature behavior of the wireless device; and
comparing the signature behavior with a current behavior of the wireless device to determine whether the current behavior is aggressive.
6. The wireless device of claim 1 , wherein the rules set defines a back-off timer for a first state transitioning to a second state of the wireless device.
7. A method performed by a wireless device that contains a wireless modem and a Subscriber Identity Module (SIM),the SIM comprises a memory for storing program code for performing a plurality of operations, SIM access files, and a rules set that defines an aggressive behavior of the wireless device, the method comprising:
monitoring requests from the wireless modem for accesses to SIM access files stored in the SIM;
detecting the aggressive behavior of the wireless device based on the rules set, the aggressive behavior is present when the wireless device repeatedly retries to perform a network signaling in a time frame such that a threshold for the retries is exceeded, wherein the rules set specifies the number of successive accesses allowed for one or more SIM access files, and the length of a disabling period when the aggressive behavior of the wireless device is detected; and
blocking the wireless modem from generating network signaling in the wireless network, wherein blocking the wireless modem comprises invalidating one or more of the SIM access files that are accessed by the wireless modem when the wireless modem generates network signaling.
8. The method of claim 7 , wherein the rules set specifies the number of successive accesses allowed for one or more SIM access files, and the length of disabling period when the aggressive behavior of the wireless device is detected.
9. The method of claim 7 , wherein the SIM access files stored in the SIM includes an Elementary File that store an International Mobile Subscriber Identity (IMSI) of the wireless device.
10. The method of claim 7 wherein detecting an aggressive behavior further comprises: issuing a command from a software agent in the SIM to the wireless modem to obtain an error code indicating a cause of error in a wireless connection of the wireless device.
11. The method of claim 7 , further comprising;
performing a self-certification process by the wireless device to obtain a signature behavior of the wireless device; and
comparing the signature behavior with a current behavior of the wireless device to determine whether the current behavior is aggressive.
12. The method of claim 7 , wherein the rules set defines a back-off timer for a first state transitioning to a second state of the wireless device.