Method and system to prevent ultrasound data leaks in mobile devices

1. An ultrasound security system that integrates with an operating system on a mobile computing device, and comprises:

an app flow analysis system that generates and maintains runtime flow graphs for apps running on the mobile device and analyzes the runtime flow graphs to identify a set of apps having confidential data flow application programming interfaces (APIs) in their execution paths;

a detector that further evaluates the set of apps having confidential data flow APIs to identify a subset of vulnerable apps also having ultrasound emitting APIs; and

a runtime correlation system that flags a vulnerable app as a potential data leak when a call to an ultrasound emitting API is detected from the vulnerable app.

2. The ultrasound security system of claim 1 , further comprising a countermeasure system that broadcasts a temporal sound blocking signal to neutralize an ultrasound transmission from the vulnerable app.

3. The ultrasound security system of claim 2 , further comprising a configuration interface for selecting countermeasure settings for apps stored on the mobile device, wherein the countermeasure settings are selected from a group consisting of: auto-block, warn or allow.

4. The ultrasound security system of claim 2 , wherein the countermeasure system determines a time slot for broadcasting the temporal sound blocking signal by analyzing the runtime flow graphs.

5. The ultrasound security system of claim 2 , wherein the temporal sound blocking signal comprises a 180 degree phase shifted signal of a captured ultrasound signal.

6. The ultrasound security system of claim 2 , wherein the countermeasure system includes generating a warning via a pop-up window.

7. The ultrasound security system of claim 6 , wherein in response to the warning, an interface is provided to either block or allow an imminent ultrasound transmission.

8. A computer program product stored on a computer readable storage medium, which when executed by a computing system, provides an ultrasound security system that integrates with an operating system on a mobile computing device, the program product comprising:

program code that generates and maintains runtime flow graphs for apps running on the mobile device and analyzes the runtime flow graphs to identify a set of apps having confidential data flow application programming interfaces (APIs) in their execution paths;

program code that further evaluates the set of apps having confidential data flow APIs to identify a subset of vulnerable apps also having ultrasound emitting APIs; and

program code that flags a vulnerable app as a potential data leak when a call to an ultrasound emitting API is detected from the vulnerable app.

9. The program product of claim 8 , further comprising program code that broadcasts a temporal sound blocking signal to neutralize an ultrasound transmission from the vulnerable app.

10. The program product of claim 9 , further comprising program code that determines a time slot for broadcasting the temporal sound blocking signal by analyzing the runtime flow graphs.

11. The program product of claim 9 , wherein the temporal sound blocking signal comprises a 180 degree phase shifted signal of a captured ultrasound signal.

12. The program product of claim 8 , further comprising a configuration interface for selecting countermeasure settings for apps stored on the mobile device, wherein the countermeasure settings are selected from a group consisting of: auto-block, warn or allow.

13. The program product of claim 8 , further comprising program code for generating a warning via a pop-up window.

14. The program product of claim 13 , herein in response to the warning, an interface is provided to either block or allow the ultrasound transmission.

15. A computerized method that provides ultrasound security on a mobile computing device, comprising:

generating and maintaining runtime flow graphs for apps running on the mobile device;

analyzing the runtime flow graphs to identify a set of apps having confidential data flow application programming interfaces (APIs) in their execution paths;

further evaluating the set of apps having confidential data flow APIs to identify a subset of vulnerable apps also having ultrasound emitting APIs;

flagging a vulnerable app as a potential data leak when a call to an ultrasound emitting API is detected from the vulnerable app; and

broadcasting a temporal sound blocking signal to neutralize an ultrasound transmission from the vulnerable app.

16. The computerized method of claim 15 , further comprising determining a time slot for broadcasting the temporal sound blocking signal by analyzing the runtime flow graphs.

17. The computerized method of claim 15 , further comprising providing a configuration interface for selecting countermeasure settings for apps stored on the mobile device, wherein the countermeasure settings are selected from a group consisting of: auto-block, warn or allow.

18. The computerized method of claim 15 , wherein the temporal sound blocking signal comprises a 180 degree phase shifted signal of a captured ultrasound signal.

19. The computerized method of claim 15 , further comprising generating a warning via a pop-up window prior to broadcasting the temporal sound blocking signal.

20. The computerized method of claim 19 , wherein, in response to the warning, providing an interface to either block or allow the ultrasound transmission.