BR102013006561B1 - METHOD FOR DETERMINING MOBILE DEVICE PASSWORD SETTINGS BASED ON WIRELESS SIGNAL INFORMATION - Google Patents

Abstract

METHOD FOR DETERMINING MOBILE DEVICE PASSWORD SETTINGS BASED ON WIRELESS SIGNAL INFORMATION Methods, devices, and systems for altering a mobile electronic device screen timeout based on a number of wireless signals in the environment, geographic location, registration on social location networking sites, identified jurisdictions, or other measures are disclosed. Audio noise may be used in conjunction with the number of signals to determine whether the user of the device is in a crowded jurisdiction where theft of the device is more likely. A ring tone may be altered in addition to the password timeout. A distance from an employee badge may be used to determine whether the device has been left behind by a user, and the device may speed up its password-protected timeout.

Description

REFERENCES TO RELATED APPLICATIONS

This application refers to and incorporates by reference for all purposes the full disclosure of Co-pending United States Patent Application No. 13/434,481, entitled “METHOD FOR DETERMINING MOBILE DEVICE PASSWORD SETTINGS BASED ON WIRELESS SIGNAL INFORMATION” (Attorney Dossier No. 89809-807723(002100US)); Co-pending United States Patent Application No. 13/434,501, entitled “METHOD FOR DETERMINING MOBILE DEVICE PASSWORD SETTINGS BASED ON WIRELESS SIGNALS” (Attorney Dossier No. 89809-835192(002110US)); Copending United States Patent Application No. 13/434,536, entitled “METHOD FOR DETERMINING MOBILE DEVICE PASSWORD SETTINGS BASED ON CHECK-IN INFORMATION” (Attorney Dossier No. 89809-835193 (002120US)); and Copending United States Patent Application No. 13/434,559, entitled “METHOD FOR DETERMINING MOBILE DEVICE PASSWORD SETTINGS BASED ON ACCELERATION INFORMATION” (Attorney Dossier No. 89809-835195 (002130US)).

BACKGROUND 1. Field of Invention

In general, embodiments of the present invention relate to information security on mobile electronic devices, and particularly to adjusting screen timeouts of mobile devices based on RF and other measurements and/or their locations.

2. Description of Related Art

Computing devices have become more powerful, more portable, and more intuitive to use. Businesses and consumers alike have embraced high-tech devices in their business and personal lives. Many have become highly dependent on their portable computing devices, such as smartphones, personal data assistants (PDAs), laptop computers, and so on. As the digital age progresses, some recognize that a computing device itself is often not the most important asset to an individual or company, but rather that the data stored on the device is the most important asset. Information often carries a value many times greater than the physical device. To illustrate the value of data relative to physical hardware, we note that forward-looking businesses often use full-disk encryption and basic system/output (BIOS) level passwords to achieve these goals.

Portable and mobile devices, especially work-related and business-related devices, often contain sensitive information. A timed passcode is commonly used to prevent a lost or stolen smartphone or other electronic device from leaking such data. After the device has been “idle” for a set timeout period, the system automatically locks. Further interaction with the device typically requires passcode entry.

Frequent password entry after a device has been locked is often viewed by users as a nuisance, albeit a necessary nuisance to protect the information contained on their devices. Users generally prefer relatively long timeouts so that they do not have to enter passwords too frequently. Company IT department policies typically require that timeouts be relatively short for devices serviced by the IP department. This reduces the risk that an unauthorized user, such as a thief, will access data on a mobile device or break into company computers through the device. When setting timeouts for devices, an IT department must balance the risks of theft and unauthorized entry with the convenience and usability of their devices. Some users have relatively limited access to company data through their devices and therefore require less protection. These users may be more numerous, so the opportunity for loss or theft may be greater. Some users have relatively unimpeded access to company data through their devices and therefore require more protection. However, the number of such users may be small. Many IT department policies require a minimum, standard timeout interval (e.g., 5 minutes) on certain devices; some IT departments set different intervals depending on the users' roles. Some have attempted to address the problem of password inconvenience by making password entry or other authentication as efficient as possible. For example, devices that incorporate fingerprint or other biometric readers can sometimes be faster at authenticating a user than traditional password entry. However, these systems often require additional hardware. They are not perfectly secure, and sometimes have a backup password entry system in case the special hardware breaks down or a personal biometric is corrupted (e.g., a cut finger).

There is a need in the technique for more convenient wait times involving password protection.

BRIEF SUMMARY

Methods, devices, and systems are disclosed for altering a mobile electronic device's screen dwell time interval based on measurements at or from a location of the mobile device. A distinct number of wireless signals in the environment can be measured and then a dwell time interval adjusted downwardly when there are more such signals. In addition to geographic location, a scan of a wireless device for a given location can indicate the number and type of nearby jurisdictions. If these jurisdictions are considered havens for theft, then dwell times can be adjusted downwardly. A user can identify specific locations as being riskier, or less risky, than others. Audio noise measured through a mobile phone microphone can also be used to determine if an area is crowded and dwell times can be adjusted. In addition, or alternatively, a mobile phone's ringer tone can be adjusted based on the risk it detects.

In some applications, an identity badge and a mobile device can be linked so that the mobile device can adjust its wait time settings based on its distance from the badge. If an employee leaves his or her mobile device at a counter and walks away, he or she can reduce his or her wait time interval based on a lack of response from a radio frequency identification (RFID) tag on the badge.

Embodiments of the present invention relate to a method for securing a mobile device. The method includes measuring a number of distinct wireless signals in the environment or the strength of wireless signals in the environment near a mobile device, determining a risk of theft of the mobile device based on the measurement, and adjusting a delay time for the device based on the determined risk.

The method may include determining a number of available wireless connection points, identifying nearby jurisdictions based on a device registration for a specific geographic location, and/or consulting crime statistics for a specific geographic location to determine the pertinent risk. A ring tone may be changed on a cell phone based on the risk.

One embodiment relates to a method for securing a mobile device. The method includes measuring the existence of a signal or the strength of a signal from a radio frequency identification (RFID) tag, determining a theft risk of the mobile device based on the measurement, and establishing a delay time for the device based on the determined risk. The RFID tag may be embedded within or otherwise connected to a badge. Other wirelessly enabled tags are contemplated.

One embodiment relates to a badge system, including a badge having a radio frequency identification (RFID) tag and a tangible machine-readable storage medium incorporating information indicative of instructions for causing one or more machines to perform operations. The operations include measuring an existence of, or a strength of, a signal from the RFID tag, determining a risk of theft of the mobile device based on the measurement, and establishing a delay time for the device based on the determined risk.

BRIEF DESCRIPTION OF THE DRAWINGS

Figure 1 illustrates an accelerated wait time of a smartphone according to an embodiment. Figure 2 illustrates a standard wait time of a smartphone according to an embodiment. Figure 3 illustrates a delayed wait time of a smartphone according to an embodiment. Figure 4 illustrates a wait time adjustment interface for distinct risk modes according to an embodiment. Figure 5 illustrates a wait time adjustment interface for risk associated with distances according to an embodiment. Figure 6 illustrates a wait time adjustment interface for risk associated with a number of wireless signals in the environment according to an embodiment. Figure 7 illustrates a wait time adjustment interface for risk associated with local crime statistics according to an embodiment. Figure 8 illustrates an interface for inputting geographic locations according to an embodiment. Figure 9 illustrates a map of geographic locations for an associated campus according to an embodiment. Figure 10 illustrates a map of geographic locations for a residence according to an embodiment. The Figure illustrates a badge distance determination according to an embodiment. Figure 12 is a flowchart of a process according to an embodiment. Figure 13 is a flowchart of a process according to an embodiment. Figure 14 illustrates a computer system suitable for implementing an embodiment.

DETAILED DESCRIPTION

Generally, methods, devices, and systems are disclosed for altering a display dwell time interval of the mobile electronic device based on measurements at or from the location of the mobile device. The strength, quality, and/or number of wireless signals in the environment can be measured to determine a risk for a specific area. A dwell time period for the device can be adjusted upward for low-risk areas (e.g., in a suburban home) or adjusted downward for high-risk areas (e.g., in a crowded urban shopping mall). The geographic location of a device can be determined using an embedded global positioning system (GPS) antenna and associated circuitry and/or auxiliary sensors, such as accelerometers.

A registration of the device to a location-based social networking site, such as the Foursquare® social networking site, may be used to determine which jurisdiction(s) the device is in. If the nearby jurisdiction(s) are statistically known to be high crime jurisdictions by others as risky, have been identified as having a crowd (such as having a large number of people registering or receiving a crowd identifier such as a badge), or have been identified by the user or their friends as risky, then a device wait time may be automatically adjusted accordingly. A registration may be accomplished through operations including a GPS request, scanning a code with a camera, selecting a location on a map using geocoding, audio information (such as a concert), and/or manually selecting a jurisdiction from a list. Subsystems that assist in registration may be monitored such that the information is reported to the social networking site and a smartphone blocking subsystem. Monitoring may include access to a library, such as a visual scanning library used to scan the codes. In some embodiments, geocoding and/or reverse geocoding may be used to convert the coordinates to a jurisdiction. In other embodiments, a location-based social networking site may report the records to the mobile device.

Audio noise measured through a microphone operatively connected to the device can be used to determine whether the device is in a crowd. When there are more people around, there is usually a greater risk of theft. Therefore, a device wait time can be adjusted accordingly. Some locations such as work or home have a lower risk of theft than, for example, industry conferences, which may be teeming with direct competitors. In lower-risk locations, frequent entry of the security password becomes a nuisance. However, in high-risk locations such as conferences, a 30-second wait time can be crucial and extremely useful in preventing information from falling into the wrong hands.

In the prior art, a single use case of securing a device could enable an automatic lock that is introduced within minutes of the last action. While safe, in the sense that it would be highly unlikely that a dropped or lost device would be compromised once the automatic lock would have been introduced, the original owner would consider such behavior to be an annoyance - and disruptive to typical use. Because of this, many users experience lock wait times that are reasonably long. However, with the increased extent of inactivity detection, the risk increases.

One embodiment enables a user to automatically set wait times based on the context of the environment, the context provided by his or her geographic location. A user at work may be reasonably comfortable with a wait time of average length. When the user is at home, the automatic lockout wait time may be significantly longer. However, when the user travels from the workplace for lunch or on a business trip, the invention may automatically, without immediate human intervention, change the default wait time to a setting more appropriate to the risk presented.

A configuration screen can be used that allows a user to set the geographic location, a bounding box or radius, and an auto-lock timeout. For corporate-owned devices, a central IT department may consider known, established locations (e.g., a campus comprised of multiple buildings with parking lots and open space between them) for the devices. The configuration screen can allow multiple environments to be created and managed. Example settings for a mobile device used within a corporate environment might include: 1. “Building A”, defined by a geographic bounding box of the tuple: (minimum latitude, minimum longitude), (maximum latitude, maximum longitude), auto-lock timeout: 15 minutes. 2. “Building B”, defined by a geographic bounding box of the tuple: (minimum latitude, minimum longitude), (maximum latitude, maximum longitude), auto-lock timeout: 15 minutes. 3. “Building C”, defined by a geographic bounding box of the tuple: (minimum latitude, minimum longitude), (maximum latitude, maximum longitude), auto-lock timeout: 15 minutes. 4. “Home”, defined by a geographic center and radius of (center latitude, center longitude, 40 meters), auto-lock timeout: 1 hour. 5. “Elsewhere”, defined as not being within one of the above areas, auto-lock timeout: 30 seconds. Timeouts can be triggered via a rule affected by geographic location. If a mobile device was in the “Home” environment, idle for 20 minutes, and moved outside the radius (and assuming that the work environments defined by Buildings A-C do not overlap), the “Elsewhere” rule set could be triggered and calculate that the time since idle has exceeded 30 seconds, and thus instantly auto-lock. An indicator on the mobile device, such as an indicator light, displays an indication of the current rule set. For example, a “Home” rule set might use a solid green light, while an “Elsewhere” rule set might cause the indicator to flash red.

In some embodiments, when locked, moving back to a different zone does not “unlock” the device, even if the rule dictates that it has remained unlocked. One reason for this behavior is to increase security and prevent a potential scenario where a lost device is found shortly after leaving the predefined area, and slightly outside the predefined area. It can also be assumed that the locked state also prohibits access to the settings screen, including the portions that allow for the creation and management of new zones in the context of this invention. Consideration can also be given to people who may occupy spaces at or near the edge of the defined boundary. Geographic positioning technologies, while accurate in most cases, can sometimes derive or reflect a position slightly off from the person’s actual location. A person sitting in a corner office may find it disruptive if the location temporarily moves outside the corporate building, e.g., “Building A,” and the “Elsewhere” rule set when the 30-second auto-lock is introduced. To assist in this scenario, a geographic positioning location can be augmented by estimation technologies such as accelerometers to provide an effective “location,” with the centroid reflecting the actual position.

An example of estimation assistance is: 1. A person is sitting in a corner office in “Building A” in a corporate environment. 2. GPS technology is used to determine location. 3. An accelerometer onboard the device detects that the device has not moved. 4. GPS locations are constantly accumulated and a centroid is calculated. 5. Sometimes, the instantaneous GPS location reading may reflect that the position is outside the “Building A” boundary box, however, based on the accumulated GPS centroid location, and information that the device has not moved sufficiently (based on the integration of accelerometer readings), the final determined location remains within the centroid, and thus we enable this user to obtain the convenience benefits of working in the “Building A” environment, with a total dwell time of 15 minutes.

There are many technical advantages to embodiments of the invention. Existing sensors, such as a radio frequency (RF) antenna and an audio microphone in a mobile phone, can be used to determine whether a device is in a crowded area. Such areas are typically associated with higher levels of theft risk; therefore, a device's dwell time can be automatically adjusted accordingly. In conjunction with such integrated sensors, non-integrated data, such as local crime statistics and user identifiers, can be used to modify the risk. A ring tone from a phone can indicate to the user the level of theft risk to which a particular phone is subject. This feedback can inform the user to secure the device as well as other belongings in cases where the user may have forgotten about such risks. IT departments can standardize geographic risk areas for a company and then push these area definitions to users so that users do not have to input them separately. In some cases, feedback provided to a user in the form of a shorter wait time could inform the user that he or she is in a high-risk area, according to one corporate IT department. Additionally, a user may be encouraged to leave his or her mobile device safely in the office rather than carry it on personal errands because the device's accelerated wait time makes it less usable, more inconvenient in other areas.

In one embodiment, detected accelerations may be used to determine a risk of theft of a mobile device. A brief acceleration at the speed of gravity followed by a sudden jolt may mean that a mobile device has been dropped. A sudden jolt or stop may include 200 or more times the force and/or acceleration of gravity. Using these acceleration events, the mobile device establishes a dwell time in its determination of whether or not a drop has occurred. In one embodiment, a history of accelerations and/or acceleration time frames may be monitored. For example, the mobile device determines that every day between 6 and 7 p.m., it receives a similar acceleration event. This event may be tied to the fact that a user drops the mobile device in a basket every day upon returning home. Thus, a repeated event may not trigger a decrease in dwell time. In some embodiments, acceleration events may be classified into different types of events. For example, an acceleration event may be classified into a controlled event or an uncontrolled event. A controlled event may include the placement of a device on a hard surface where rotation and/or bounce are limited. An uncontrolled event may include a fall with a bounce and/or rotation that is not compatible with a placement. Theft risk and/or dwell time may be calculated internally or externally. In some embodiments, a mobile device may provide services necessary to calculate a theft risk and determine a dwell time. In other embodiments, the mobile device may request updates to information, such as from an IP department regarding risk assessment, updated dwell times for different risk levels, and/or equation information to determine risk and/or dwell times. In one embodiment, a mobile device may request information about a location or jurisdiction, such as crime statistics, to include in the calculation. In some embodiments, the mobile device may collect information and send the information to a remote server system for processing and returning a dwell time.

Figure 1 illustrates an accelerated standby time of a smart phone in accordance with one embodiment. The smart phone 101 includes a display 102, which is locked. In screen area 105, the display 102 highlights to the user that the lock has been accelerated. In area 104, the display 102 informs the user that the risk of theft is “HIGH,” and in area 103, the display shows the user that a large number of distinct wireless signals in the environment are responsible for determining that the user is in a risk area. For example, the smart phone counts 30 different wireless hotspots and cell tower channels being used with its integrated antenna 107. Because it is in the middle of this large number of signals, it may determine that it is in an urban environment where there is a higher risk of theft. The smart phone accelerates its standby time from a standard 5 minutes to a rapid 30 seconds before locking. The smart phone 101 can differentiate between known wireless signals and unknown wireless signals. A known wireless signal, such as that emitted from a home wireless access point or other family cell phones, can be detected and the risk assessment narrowed down. Upon detection of a recognized signal, such as from an identifier such as a media access control address, the smart phone can decrease its wait time interval from a pre-set 5 minutes to 20 minutes before locking. The smart phone 101 can use the accelerometer 108 to further refine its risk assessment. If it is determined that the phone has been dropped (from a user's pocket), then it can be considered more likely to have been lost. Therefore, the wait time can be adjusted accordingly. The smart phone 101 can use user input to further refine its risk assessment. A user can indicate that he or she intends to remain at a certain location (e.g., a concert) for 2 hours. If the phone is removed from the jurisdiction before the 2 hour time limit expires, then there is a greater risk that the phone has been stolen. The timeout may be adjusted accordingly. To resume full interaction with the device, a user is prompted in display area 106 to re-enter his or her passcode. A biometric reader may be used in conjunction with the passcode or instead of the passcode. A “distinct” wireless signal includes a radio frequency signal that is on a different frequency, band, spectrum, channel, or other communication protocol as known in the art than another wireless signal. “Ambient” wireless signals include those signals that exist in a given location at a given time. Figure 2 illustrates a standard timeout for a smart phone in accordance with one embodiment. In display area 203, display 102 shows the user that there are a moderate number of distinct wireless signals in the environment such that smart phone 101 determines the risk to be “MEDIUM” (as indicated in area 204). Area 205 indicates that the hold time was at a default setting. For example, the smartphone counts ten distinct wireless connection sites and cell tower channels being used. Since it is in the middle of this moderate number of signals, it determines that it is in a suburban environment where there is a normal risk of being stolen. The smartphone maintains its hold time interval at a default of 5 minutes. Figure 3 illustrates a delayed hold time of a smartphone in accordance with one embodiment. In area 303, display 102 shows the user that there are a small number of distinct wireless signals in the environment, such that smartphone 101 has determined that the risk is “LOW” (as indicated in area 304). Area 305 indicates that the hold time has been delayed from its default setting. For example, the smartphone counts 1 wireless signal (its own) for communication with a cell tower. Since there are no other devices, and probably only a few other people around, he determines that he is in a rural environment where there is a low risk of being robbed. The smartphone extends its standby time interval to 30 minutes from a default of 5 minutes.

In another embodiment, a smart phone may increase the determined risk when a detected signal strength indicates that a wireless device is within inches of another wireless device. For example, a smart phone may be stolen from the pocket of an unsuspecting owner. Because the smart phone is placed in a pocket with a second wireless phone, the smart phone may detect the strong signal strength of the second wireless phone, which is above a threshold, and immediately lock the device due to the determined risk. Figure 4 illustrates a timeout configuration interface for distinct risk modes according to one embodiment. In field 410 of interface 400, a user may set the timeout period for the device when the device is in a high risk area. In this case, the setting is 30 seconds. In field 411, a user may set the timeout period for the device when it is in a medium risk area. In this case, the setting is 5 minutes. In field 412, a user may set the dwell time period for the device when it is in a low risk area. The user has set this to “NEVER”, so that a dwell time is indefinitely postponed (while in the low risk area). In some embodiments, distinct risk modes may be replaced by continuously variable risk determinations. Figure 5 illustrates a dwell time setting interface for distances according to one embodiment. In field 513 of interface 500, a user may set the default dwell time period for the device. In this case, the default is set to 30 minutes. In field 514, a user may set a time period to be subtracted from the 30 minutes according to a formula. In this case, 1 minute may be subtracted. In field 515, a user may set a distance for the formula, here being 10 meters from a low risk area. In field 516, a user can set the minimum time interval for a timeout. Here, it is set to 30 seconds. With the settings shown, a timeout period is set to 30 minutes minus 1 minute for every 10 meters outside a low-risk area, with a minimum of 30 seconds. In an example where the device is determined to be 40 meters away from a low-risk area (e.g., in a park across the street from a company campus), the timeout period is set to: (Equation 1) 30 minutes - (40 meters) x (1 minute / 10 meters) = 26 minutes

As another example the device is determined to be one kilometer (i.e. 1,000 meters) away from a low risk area, the wait time period is set to: (Equation 2) 30 minutes - (1,000 meters) x (1 minute / 10 meters) = negative Therefore: 30 seconds

A dwell time period is adjusted linearly in conjunction with the associated risk. As a person is further away from his or her workplace, the risk of theft increases proportionally. In the areas immediately surrounding the person's workplace, the risk can be determined to be a linear function of the distance from the workplace. The dwell time period is adjusted accordingly. Other functions (motorically increasing/decreasing) can be used for determining risk with respect to distance. For example, a polynomial or exponential function can be used. A dwell time can be triggered if a current dwell time period is exceeded based on a time since a last interaction with a device. In one embodiment, when a new dwell time is determined, a device can be locked if the dwell time value has been exceeded. A newly determined dwell time period does not necessarily reset a dwell time counter to zero, but can simply adjust a dwell time threshold. Figure 6 illustrates an interface for setting a wait time for wireless signals in the environment according to one embodiment. In field 613 of interface 600, a user may set the default wait time period for the device. In this case, the default is set to 30 minutes. In fields 614 and 615, a user may set an amount of time to be subtracted from the 30 minutes according to a formula. In this case, 1 minute may be subtracted for every 3 wireless signals detected. In field 616, a user may set the minimum time interval for a wait time. Here, it is set to 30 seconds.

With the configuration shown, the hold time period is set to 30 minutes minus 1 minute for every 3 wireless signals detected, with a minimum of 30 seconds. In an example where the device detects 22 distinct wireless signals, the hold time period is set to: (Equation 3) 30 minutes - (21 signals) x (1 minute / 3 signals) = 22.7 minutes Figure 7 illustrates a hold time configuration interface for local crime statistics in accordance with one embodiment. In field 713 of interface 700, a user may set the default hold time period for the device. In this case, the default is set to 30 minutes. In fields 714 and 715, a user may set a time period to be subtracted from the 30 minutes according to a formula. In this case, 1 minute is subtracted for each crime reported within 1 mile. In field 716, a user may set the minimum time interval for a hold time. Here, it is set to 30 seconds. With the configuration shown, a wait time period is set to 30 minutes minus 1 minute for each crime reported within 1 mile, with a minimum of 30 seconds. In an example where the device has queried crime statistics and found 15 within a one-mile radius, the wait time period is set to: (Equation 4) 30 minutes - (15 crimes) x (1 minute/1 crime) = 15 minutes Figure 8 illustrates an interface for entering geographic locations according to one embodiment. In the figure, geographic locations are defined as low-risk areas. In field 820 of interface 800, an IT department administrator can enter a company name for the relevant company. In field 821, a limited geographic area can be labeled; here it is labeled “Building “100”. Using radio buttons 822, the system boundary can be defined. In this case, a rectangular boundary area—or more precisely, a 4-sided polygon—is selected. In fields 823, the administrator can enter four coordinates for the four points of the polygon to define the rectangle. In fields 824, another building, “Building 200,” is defined. Building 200 can be Building 100 across the street, diagonally across, or far away. In any case, the buildings can be associated with each other as a work area with the same risk value. In field 825, a user may wish to label another low-risk area by labeling the same “employee residence.” In field 826, the user has entered his residence, and in field 827 he has selected a circle for the definition of his personal low-risk area. In field 828, the user has entered a center point for the circle, and in field 829 he has entered a radius of the circle. That is, the low-risk area for employee residence is a circular area with the specified radius centered at the specified latitude and longitude. Figure 9 illustrates a map of geographic locations for a corporate campus in accordance with one embodiment. The map 900 may be used to establish geographic boundaries or simply display the boundaries. Points 923 correspond to latitude/longitude coordinate fields 823 (Figure 8). As shown, these points may or may not align with an effective corner of a building. They may be a simplified perimeter of a building aligning with perimeter streets, or not aligning with any physical structure. The boundary 930 of building 100 and the boundary 931 of building 200 may be considered to be a corporate campus. Within the boundaries of the areas, a mobile device may consider itself to be in a low-risk area. When someone moves away from one of the boundaries and is outside of the boundaries, a wait time on the mobile device may adjust according to a distance formula such as that in Equation 1. Figure 10 illustrates a map of geographic locations for a residence according to one embodiment. In the map 1000, the geographic area 1032 is defined by the center point 1028 (as input in the center point field 828 of Figure 8) and radius 1029 (as input in the radius field 829 of Figure 8). In the figure, the circle is centered on the residential property and its circumference intersects the four corners of the property. As in the rectangular boundary examples, the circular boundaries need not align with physical features.

Although the embodiments shown are for defining low risk areas, high risk (and medium risk) areas may be defined in the same manner. Figure 11 illustrates a badge distance determination according to one embodiment. The system 1100 comprises the badge 1133 and the mobile device 1101, or software installed thereon. The badge 1133 has elements 1134 that identify the owner of the badge, such as a photograph, name, and barcode, as well as a radio frequency identification (RFID) chip 1135. The mobile device 1101 has display 1102 and RFID reader sensor 1137. The RFID reader sensor 1137 interrogates the RFID tag 1135 by “pinging” a predefined frequency (set of) and listening for a response from the tag. If the distance 1136 is determined to be greater than a threshold (e.g., 20 feet), or if a ping results in no response from the RFID tag 1135, then the mobile device 1101 enters an accelerated timeout. This result is displayed to the user in area 1105 on the display 1102.

In another embodiment, an external device is used to add risk detection functionality to a mobile device 1101. For example, a signal counter and antenna is included in a badge 1133, bracelet, or other wearable item. The signal counter and antenna are used to increase the risk detection of the mobile device by counting, identifying, and/or detecting a strength of wireless signals at the antenna. The increased functionality is reported back to the mobile device 1101. Using the reported number of signals, identified signals, and/or strength of signals, the mobile device can determine an appropriate delay time. Signals can also be categorized. In one embodiment, signals are categorized as safe signals, which can include such signals as those produced by known private routers. Signals can be categorized as more dangerous signals, such as unknown public wireless hotspots or cellular phone signals. Figure 12 is a flowchart illustrating process 1200 according to one embodiment. In operation 1201, settings are received from a central information technology (IT) department of a commercial organization. In operation 1202, the number of distinct wireless signals in the environment or the strength of wireless signals in the environment near a mobile device are measured. In operation 1203, a theft risk of the mobile device is determined based on the measurement and settings. In operation 1204, a hold time for the device is established based on the determined risk. Figure 13 is a flowchart illustrating process 1300 according to one embodiment. In operation 1301, the existence of a signal or a strength of a signal from a radio frequency identification (RFID) tag is measured. In operation 1302, a theft risk of the mobile device is determined based on the measurement. In operation 1303, a hold time is established for the device based on the determined risk. The operations may be performed in the sequence given above or in different orders, as applicable. They may be automated on a computer or other machine and may be encoded in software, firmware, or hard-coded as machine-readable instructions and executed by one or more processors that can implement the instructions. Figure 14 illustrates an example of a hardware system suitable for implementing a device in accordance with various embodiments. This block diagram illustrates a computer system 1400, such as a personal computer, a video game console and associated display, mobile device, personal digital assistant, or other digital device, suitable for practicing embodiments of the invention. The computer system 1400 includes a central processing unit (CPU) 1405 for executing software applications and optionally an operating system. The CPU 1405 may be composed of one or more homogeneous or heterogeneous processing cores. Memory 1410 stores applications and data for use by CPU 1405. Storage media 1415 provides non-volatile storage media and other computer-readable media for applications and data and may include fixed disk drives, removable disk drives, flash memory devices, and CD-ROM, DVD-ROM, Blu-ray, HD-DVD or other optical storage devices, as well as signal transmission and storage media. User input devices 1420 communicate user input from one or more users to computer system 1400, examples of which may include keyboards, mice, joysticks, touch pads, touch screens, still or video cameras, and/or microphones. Network interface 1425 allows computer system 1400 to communicate with other computer systems via an electronic communications network, and may include wired or wireless communication over local area networks, and wide area networks, such as the Internet. An audio processor 1430 is adapted to generate analog or digital audio output from instructions and/or data provided by CPU 1405, memory 1410, and/or storage medium 1415. Audio processor 1430 may be connected to inputs, such as microphone 1470, and outputs, such as speaker 1475. Components of computer system 1400, including CPU 1405, memory 1410, data storage medium 1415, user input devices 1420, network interface 1425, and audio processor 1430 are connected via one or more data buses 1435. Audio processor 1430 is connected to microphone 1470.

A graphics subsystem 1440 is further connected to data bus 1435 and the components of computer system 1400. Graphics subsystem 1440 includes a graphics processing unit (GPU) 1445 and graphics memory 1450. Graphics memory 1450 includes a display memory (e.g., a frame storage medium) used to store pixel data for each pixel of an output image. Graphics memory 1450 may be integrated into the same device as GPU 1445, connected as a separate device to GPU 1445, and/or implemented within memory 1410. Pixel data may be provided to graphics memory 1450 directly from CPU 1405. Alternatively, CPU 1405 provides GPU 1445 with data and/or instructions defining desired output images, from which GPU 1445 generates pixel data for one or more output images. The data and/or instructions defining desired output images may be stored in memory 1410 and/or graphics memory 1450. In one embodiment, GPU 1445 includes 3D rendering capability to generate pixel data for output images from instructions and data defining the geometry, lighting, shading, texturing, motion, and/or camera parameters for a scene. The GPU 1445 may further include one or more programmable execution units capable of executing color grading programs. The graphics subsystem 1440 periodically outputs pixel data for an image from the graphics memory 1450 to be displayed on the display device 1455. The display device 1455 may be any device capable of displaying visual information in response to a signal from the computer system 1400, including CRT, LCD, plasma, and OLED displays. The computer system 1400 may provide the display device 1455 with an analog or digital signal. In accordance with various embodiments, the CPU 1405 is one or more general-purpose processors having one or more processing cores. Additional embodiments may be implemented using one or more CPUs 1405 with microprocessor architectures specifically tailored for highly parallel and computationally intensive applications, such as media and interactive entertainment applications. The components of a system may be connected by means of a network, which may be any combination of the following: the Internet, an IP network, an intranet, a wide area network (“WAN”), a local area network (“LAN”), a virtual private network (“VPN”), the Public Switched Telephone Network (“PSTN”), or any other type of network supporting data communication between the devices described herein, in different embodiments. A network may include wired connections and wireless connections, including optical links. Many other examples are possible and apparent to those skilled in the art in light of this disclosure. In the discussion herein, a network may or may not be specifically noted. In the foregoing specification, the present invention is described with reference to its specific embodiments, but those skilled in the art will recognize that the invention is not limited thereto. Various features and aspects of the invention described above may be used individually or in combination. Furthermore, the invention may be used in any number of environments and applications beyond those described herein without departing from the broad scope and essence of the specification. The descriptive report of drawings must, consequently, be considered as illustrative rather than restrictive.

It should be noted that the methods, systems, and devices discussed above are intended to be exemplary only. It should be emphasized that various embodiments may omit, substitute, or add various procedures or components as appropriate. For example, it should be appreciated that in alternative embodiments, the methods may be performed in a different order than that described, and that various steps may be added, omitted, or combined. Furthermore, features described with respect to certain embodiments may be combined in various other embodiments. Different aspects and elements of the embodiments may be combined in a similar manner. Furthermore, it should be emphasized that technology evolves, and thus many of the elements are exemplary and should not be construed to limit the scope of the invention.

Specific details are provided in the description to provide a complete understanding of the embodiments. However, it will be understood by those skilled in the art that the embodiments may be practiced without such specific details. For example, well-known circuits, processes, algorithms, structures, and techniques have been shown without unnecessary detail to avoid obscuring the embodiments. Furthermore, it is noted that the embodiments may be described as a process which is illustrated as a flow diagram or block diagram. Although each of these may describe the operations as a sequential process, many of the operations may be performed in parallel or simultaneously. Furthermore, the order of operations may be rearranged. A process may have additional steps not included in the figure.

Furthermore, as disclosed herein, the term “memory” or “memory unit” may represent one or more devices for storing data, including read-only memory (ROM), random access memory (RAM), magnetic RAM, core memory, magnetic disk storage media, optical storage media, flash memory devices, or other computer-readable media for storing information. The term “computer-readable medium” includes, but is not limited to, portable or fixed storage devices, optical storage devices, wireless channels, a SIM card, other smart cards, and various other media capable of storing, containing, or carrying instructions or data. Furthermore, embodiments may be implemented by hardware, software, firmware, middleware, microcode, hardware description languages, or any combination thereof. When implemented in software, software, firmware, middleware, or microcode, the program code or code segments to perform the required tasks may be stored on a computer-readable medium such as a storage medium. Processors may perform the required tasks. Having described various embodiments, it will be recognized by those skilled in the art that various modifications, alternative constructions, and equivalents may be used without departing from the spirit of the invention. For example, the above elements may be simply a component of a larger system, in which other rules may take precedence over the application of the invention or otherwise modify the application of the invention. Furthermore, certain steps may be performed before, during, or after the above elements are considered. Accordingly, the above description should not be construed as limiting the scope of the invention.

Claims (20)

1. A computer-implemented method for jamming a device, the method comprising: detecting, via a mobile device, wireless signals in the environment; determining a number of wireless devices associated with the wireless signals; determining one or more jurisdictions in proximity to the mobile device; determining a first wait time for the mobile device based at least in part on the determined number of wireless devices and the one or more jurisdictions in proximity; detecting a change in the number of wireless devices associated with the wireless signals; and determining an updated wait time for the mobile device based at least in part on the change in the number of wireless devices. 2. The computer-implemented method of claim 1, further comprising setting a bell tone based at least in part on the updated wait time. 3. The computer-implemented method of claim 1, further comprising: determining information derived from a number of persons who have registered with a jurisdiction of the one or more jurisdictions, wherein the jurisdiction is associated with a location of the mobile device; and including the derived information in determining wait times. 4. The computer-implemented method of claim 1, further comprising downloading information technology settings, the information technology settings providing settings for determining wait times. 5. Computer-implemented method according to claim 1, characterized in that detecting wireless signals in the environment includes determining a number of available wireless connection points. 6. The computer-implemented method of claim 1, further comprising: identifying one or more known wireless signals; and decreasing the first wait time based at least in part on the known wireless signals. 7. The computer-implemented method of claim 1, wherein detecting the change in the number of wireless devices associated with the wireless signals includes detecting a decrease in the number of wireless devices associated with the wireless signals, and wherein the updated wait time is greater than the first wait time. 8. The computer-implemented method of claim 1, wherein detecting the change in the number of wireless devices associated with the wireless signals includes detecting an increase in the number of wireless devices associated with the wireless signals, and wherein the updated wait time is less than the first wait time. 9. Computer-implemented method according to claim 1, characterized in that wireless signals in the environment are received from the external to the mobile device. 10. Computer-implemented method according to claim 1, characterized in that the number of wireless signals detected is representative of a risk of theft of the mobile device. 11. The computer-implemented method of claim 1, wherein the determined one or more jurisdictions proximate to the mobile device are each associated with a risk of theft of the mobile device. 12. One or more non-transitory computer-readable storage media having executable instructions collectively stored thereon that, when executed by one or more processors of a computer system, cause the computer system to at least: detect wireless signals in the environment; determine a number of wireless devices associated with the wireless signals; determine one or more jurisdictions in proximity to the mobile device; determine a first wait time based at least in part on the determined number of wireless devices and the one or more jurisdictions in proximity to the mobile device; detect a change in the number of wireless devices associated with the wireless signals; and determine an updated wait time for the mobile device based at least in part on the change in the number of wireless devices. 13. The computer-readable storage medium of claim 12, further comprising instructions that, when executed by one or more processors of a computer system, cause the computer system to at least: monitor use of a location determination system; and report a determined location of the location determination system to a risk assessment system. 14. The computer-readable storage medium of claim 13, wherein monitoring use of the location determination system includes monitoring use of a visual scanning subsystem. 15. The computer-readable storage medium of claim 14, wherein monitoring use of the visual scanning subsystem includes monitoring a call to a visual scanning library. 16. The computer-readable storage medium of claim 12, wherein calculating a wait time includes reporting a location of one or more of the wireless devices to a remote server system and receiving a wait time from the remote server system. 17. The computer-readable storage medium of claim 12, wherein the number of wireless signals detected is representative of a risk of theft of the mobile device. 18. A mobile device jamming system for a mobile device, comprising: an antenna configured to receive wireless signals in the environment; a signal counter in communication with the antenna, the signal counter configured to determine a number of distinct wireless signals in the environment and configured to determine a change in the number of distinct wireless signals in the environment; and a jamming subsystem configured to determine a hold time based at least in part on the number of distinct wireless signals in the environment and the one or more jurisdictions that are determined to be in proximity to the mobile device, and configured to change the hold time based at least in part on the change in the number of distinct wireless signals in the environment. 19. The mobile device of claim 18, wherein the antenna and the signal counter are located within the mobile device. 20. Mobile device according to claim 18, characterized in that the antenna and the signal counter are located external to the mobile device.