RU2622882C1 - System and method of assigning connection security level - Google Patents

Abstract

FIELD: information technology.

SUBSTANCE: according to embodiment, method is used to define a connection security level in which: at least one set of environment parameters from at least one mobile device is received; data transmission mode flag is received from mobile device for each set of environment parameters; environment parameters and data transmission mode flag, corresponding to each set of environment parameters, are saved in the environment database; level of security is set for each set of environment parameters using the analysis tool, depending on environment parameters and value of the data transmission mode flag in accordance with the rules of setting the security level.

EFFECT: protection of user data when mobile device is connected to computer.

16 cl, 5 dwg

Description

Technical field

The invention relates to the field of software security, and in particular to systems and methods for setting the level of connection security.

State of the art

The number of mobile devices is growing every year, and their productivity is also increasing. At the same time, the pace of development of battery production technologies is not keeping pace with the growth rate of energy consumption of mobile devices, as a result of which modern smartphones and tablets usually need to be charged every day, and sometimes several times a day. That is why charging stations or kiosks for powering batteries of mobile devices are becoming more widespread - they are located in convenient public places and are free of charge. The most popular data and electricity interface is USB. However, in some cases, in charging stations, the USB port is not connected to a power adapter, but to a computer system, usually a computer. The danger in this case is the possible transfer of confidential data from a mobile device, as well as the possibility of infecting a mobile device with malicious software (software) from a computer connected to such a USB port.

There are already adapters and cables on the market that only power mobile devices and block data transfer. There are also adapters with a built-in microcontroller for additional analysis and filtering of transmitted data, for example as described in US patent 8209739 B2. However, if a user needs to connect a mobile device to an unknown computer in order to transfer data (for example, upload photos to a computer for printing photos), he has to disconnect the adapter that blocks data transfer or turn off the filtering of transmitted data in the adapter with an integrated microcontroller. At the same time, some of these computers may present a hazard that the user is not aware of.

Analysis of the prior art allows us to conclude about the inefficiency and, in some cases, the impossibility of using previous technologies, the disadvantages of which are solved by the present invention, namely, a system and method for setting the security level of the connection.

Disclosure of invention

The present invention relates to systems and methods for setting the security level of a connection.

The technical result of the present invention is to protect user data when connecting a mobile device to a computer.

According to an embodiment, a method for setting the security level of the connection is used, in which: at least one set of environmental parameters is obtained from at least one mobile device using processing means, the environmental parameter set contains: the coordinates of the mobile device at the time of connection to the computer; information about the presence or absence within a specified time of a request from a computer to establish a connection with a mobile device for exchanging data; receive a data transmission mode flag for each set of environmental parameters from the mobile device using the processing tool, and the flag is equal to one if data transmission between the mobile device and the computer was allowed using the mobile device and is equal to zero otherwise; save the environment parameters and the flag of the data transfer mode corresponding to each set of environment parameters in the environment database using the processing means; using the analysis tool, set the security level for each set of environmental parameters, depending on the environmental parameters and the flag value of the data transfer mode in accordance with the rules for setting the security level, while the security level is used by the mobile device to form the data transfer mode between the mobile device and the computer.

According to one particular embodiment, using the analysis tool, the same security level is set for sets of environmental parameters that match each other with a given accuracy.

According to another particular embodiment, the rules for setting the security level are as follows: if there is no request from the computer in the environment settings to establish a connection with the mobile device, then a high security level value is set, which determines the high probability that the connection of the mobile device to the computer is secure; if the number of sets of environmental parameters that coincide with a given accuracy, for which the data transfer mode flag is equal to one, divided by the number of all sets of environmental parameters from the environment database is higher than a specified number, and there is also a request from the computer to establish the environment parameters connections with a mobile device then set a high level of security; in all other cases, they set a low value of the security level, which determines the low probability that the connection of the mobile device to the computer is secure.

According to another particular embodiment, the coordinates of the mobile device are determined using the mobile device using at least one of: a geolocation receiver; a cellular communication module determining locations by signals of base stations; data received from devices of the community of users of the system.

According to one particular embodiment, the environmental parameters further include the location of the mobile device indoors or outdoors.

According to another particular embodiment, the location of said mobile device in a room is determined using a mobile device using at least one of the following methods: comparing geolocation data with a location map; analysis of the audio signal using a microphone; comparing the degree of similarity of images obtained from the camera with a predetermined set of images; analysis of temperature sensor indicators; analysis of humidity sensor indicators; analysis of barometer indicators; analysis of indicators of the light sensor; analysis of proximity sensor indicators; analysis of indicators of the magnetic field sensor.

According to one particular embodiment, the location of said mobile device is determined using a mobile device by comparing said sensor data with sensor data of other mobile devices.

According to another particular embodiment, the environmental parameters further include weather characteristics determined using at least one of the sensors: an ultraviolet radiation sensor; medium temperature sensor; barometer; humidity sensor; light sensor; dosimeter.

According to an embodiment, a system for setting a connection security level is used, comprising: at least one mobile device containing at least one set of environment parameters, the set of environment parameters comprising: coordinates of the mobile device at the time of connection to the computer; information about the presence or absence within a specified time of a request from a computer to establish a connection with a mobile device for exchanging data; processing means located on a remote server and associated with a mobile device, designed to: receive at least one set of environmental parameters from at least one mobile device; receiving from a mobile device for each set of environmental parameters the flag of the data transfer mode, the flag being equal to one if data transmission between the mobile device and the computer was allowed using the mobile device, and equal to zero otherwise; saving the environment parameters and the corresponding environment parameter flag of the data transmission mode to the environment database; analysis tool located on a remote server and associated with a processing tool designed to set the security level for each set of environmental parameters depending on the environmental parameters and the value of the data mode flag in accordance with the rules for setting the security level, while the security level is used by the mobile device when the formation of the data transfer mode between the mobile device and the computer.

According to one particular embodiment, the analysis tool is designed to set the same level of security for sets of environmental parameters that match each other with a given accuracy.

According to another particular embodiment, the rules for setting the security level are as follows: if there is no request from the computer in the environment settings to establish a connection with the mobile device, then a high security level value is set, which determines the high probability that the connection of the mobile device to the computer is secure; if the number of sets of environmental parameters that coincide with a given accuracy, for which the data transfer mode flag is equal to one, divided by the number of all sets of environmental parameters from the environment database is higher than a specified number, and there is also a request from the computer to establish the environment parameters connections with a mobile device then set a high level of security; in all other cases, they set a low value of the security level, which determines the low probability that the connection of the mobile device to the computer is secure.

According to another particular embodiment, the coordinates of the mobile device are determined using said mobile device using at least one of: a geolocation receiver; a cellular communication module determining locations by signals of base stations; data received from devices of the community of users of the system.

According to yet another particular embodiment, the environmental parameters further include the location of the mobile device indoors or outdoors.

According to one particular embodiment, the location of said mobile device in a room is determined using a mobile device using at least one of the following methods: comparing geolocation data with a location map; analysis of the audio signal using a microphone; comparing the degree of similarity of images obtained from the camera with a predetermined set of images; analysis of temperature sensor indicators; analysis of humidity sensor indicators; analysis of barometer indicators; analysis of indicators of the light sensor; analysis of proximity sensor indicators; analysis of indicators of the magnetic field sensor.

According to another particular embodiment, the location of said mobile device is determined using a mobile device by comparing said sensor data with sensor data of other mobile devices.

According to another particular embodiment, the environmental parameters further include weather characteristics determined using at least one of the sensors: an ultraviolet radiation sensor; medium temperature sensor; barometer; humidity sensor; light sensor; dosimeter.

Brief Description of the Drawings

Additional objectives, features and advantages of the present invention will be apparent from reading the following description of an embodiment of the invention with reference to the accompanying drawings, in which:

In FIG. 1 shows a diagram of the present system.

FIG. 2 contains a list of possible sensors of a mobile device.

In FIG. 3 shows an embodiment of a method for generating a data transmission mode.

In FIG. Figure 4 shows a variant of the method for determining the security level using a remote server.

FIG. 5 is an example of a general purpose computer system.

Description of Embodiments

The objects and features of the present invention, methods for achieving these objects and features will become apparent by reference to exemplary embodiments. However, the present invention is not limited to the exemplary embodiments disclosed below, it can be embodied in various forms. The essence described in the description is nothing more than the specific details provided to assist the specialist in the field of technology in a comprehensive understanding of the invention, and the present invention is defined in the scope of the attached claims.

In FIG. 1 shows a diagram of the present system. The system includes a mobile device 130 (e.g., smartphone, tablet, camcorder, fitness bracelet, etc.) having a connector 2 (136) for a wired data interface (e.g., USB, Thunderbolt, Fire Wire). The security adapter 120 (hereinafter referred to as the adapter) is a separate computer device and is designed to provide data protection for the mobile device 130 when the mobile device 130 is connected to the computer 110 via a wired data transmission interface. The adapter 120 comprises a port 2 (125) to which a connector 2 (136) of the mobile device 130 is connected via a wired data interface, as well as a connector 1 (126) connected to a port 1 (111) of a computer 110 via a wired data interface. Thus, the adapter 120 is designed to connect the mobile device 130 to the computer 110 through the adapter 120 via a wired data interface, while the adapter 120 blocks the transmission of data between the mobile device 130 and the computer 110 until the formation of the data transfer mode. In a particular embodiment, there can be two modes of data transfer — data is being transmitted or data is being blocked. In both modes, power is transferred to the mobile device 130. Data transfer is blocked by opening the data lines (for example, in USB 2.0 - contacts D + and D-). The disconnection of data lines can occur either mechanically using a switch, or using a relay.

Computer 110 has a data interface port 1 (111). Computer 110 is a power source for adapter 120 and mobile device 130 through adapter 120. Thus, in the framework of the present invention, the collective term "computer" is applicable to both electronic computing devices and chargers for charging the battery of mobile device 130 from an alternating current main. or your own battery.

The mobile device 130 comprises a transceiver 1 (134) for exchanging data with a remote server 140 via a computer network 150, as well as a transceiver 2 (135) for exchanging data with a transceiver 3 (127) located on an adapter 120. The mobile device 130 also contains analysis tool 131, associated with transceivers 1-2 (134-135), with a set of sensors 133 and connector 2 (136).

Among the sensors 133, there may be, for example, the following sensors and devices shown in FIG. 2:

- a heart rate monitor (heart rate sensor) 201 for determining a user's heart rate;

- oxygen saturation sensor 202;

- pedometer 203;

- fingerprint sensor 204;

- gesture sensor 205, used to recognize user gestures;

- a camera aimed at the eyes of the user 206, which serves to determine the movement of the eyes of the user, as well as authentication of the user's identity in the iris or retina;

- the temperature sensor of the body of the user 207 (for example, having direct contact with the body of the user or non-contact);

- microphone 208;

- an ultraviolet radiation sensor 209;

- a receiver of the geolocation system 210, for example, a GPS or GLONASS receiver;

- GSM module 211;

- Bluetooth module 212;

- Wi-Fi module 213;

- a camera 214 aimed at the environment surrounding the user's device;

- ambient temperature sensor 215;

- a barometer 216, necessary for measuring atmospheric pressure and determining altitude in accordance with atmospheric pressure;

- geomagnetic sensor 217 (electronic compass), necessary for determining the cardinal points and azimuth;

- a sensor for determining air humidity 218;

- a light level sensor 219, necessary for determining color temperature and illumination;

- proximity sensor 220, which serves to determine the distance to various objects in the vicinity;

- image depth sensor 221, which serves to obtain a three-dimensional image of space;

- an accelerometer 222, used to measure acceleration in space;

- a gyroscope 223, necessary for determining the position in space;

- Hall sensor 224 (magnetic field), to determine the intensity of the magnetic field;

- dosimeter-radiometer 225, for determining the level of radiation;

- NFC 226 module;

- LTE module 227.

These sensors 133 can be located both on the mobile device 130 itself, and on separate wearable devices connected to the mobile device 130.

Transceivers 1, 2, 3 (134, 135, 127) can be a GSM, Wi-Fi, LTE, NFC module or any other module with support for wireless communication interfaces.

In a particular embodiment, the mobile device 130 comprises a local database 132, into which the analyzer 131 stores data received from the remote server 140.

The adapter 120 includes a decision module 121 and associated input device 122 and an output device 123. In a particular embodiment, input device 122 and output device 123 can be combined into a single device, such as a touch screen. In yet another particular embodiment, the adapter 120 may also include a memory module 124 associated with decision module 121. Decision module 121 is also connected to port 2 (125) and connector 1 (126).

In a particular embodiment, adapter 120 receives power from computer 110. In another embodiment, adapter 120 comprises a battery.

The remote server 140 contains an analysis tool 141 and associated processing means 142 and an environment database 143, as well as a database of security levels 144. In a particular embodiment, the databases 143 and 144 can be combined into one database.

As previously mentioned, the security adapter 120 comprises a transceiver 3 (127) that communicates with a decision module 121 and is intended to:

- sending to the mobile device 130 through the transceiver 2 (135) a request for determining the security level, the request contains information about the presence or absence, during the time specified by the decision module 121, of a request from the computer 110 to establish a connection with the mobile device 130 for exchanging data ;

- receiving from the mobile device 130 through the transceiver 2 (135) a security level, where the security level is defined as a parameter that accepts a low or high value and determines the likelihood that the connection to the computer 110 is secure;

Below in the description of FIG. 4, a method for generating a security level and the likelihood that a connection is secure will be explained in more detail.

Decision module 121 is designed to:

- determining the presence or absence within a predetermined time of a request from the computer 110 to establish a connection with the mobile device 130 for exchanging data;

- transmitting certain information (the presence or absence of a request from the computer 110 to establish a connection) to the transceiver 3 (127);

- blocking the transfer of data between the mobile device 130 and the computer 110 until the formation of the data transfer mode;

- receiving a security level from the transceiver 3 (127) (i.e., from the mobile device 130 through the transceiver 3 (127));

- counting the number of new requests for establishing a connection with the mobile device 130 while waiting for the security level from the mobile device 130;

- selecting a rule for generating a data transfer mode (examples of the rules are given below) between the mobile device 130 and the computer 110 from the memory module 124 based on the received security level and the calculated number of new connection establishment requests;

- the formation of the data transfer mode according to the selected rule from the memory module.

The memory module 124 is any memory module (for example, flash memory, SSD, HDD, SRAM, etc.) and contains the rules for the formation of the data transfer mode between the mobile device 130 and the computer 110, the rules are as follows:

- continue blocking the data transfer if the security level is high, but while receiving the security level, the computer 110 sent new requests to the security adapter 120 to establish a connection with the mobile device in excess of the specified value;

- continue blocking data transmission if the security level is low;

- unlock data transfer in all other cases (for example, if the user received a command to unlock data transfer to input device 122). Further particular embodiments of the interaction of the mobile device 130 with the computer 110 via the security adapter 120 will be described later in the description of FIG. 3-4. In addition, embodiments using the remote server 140 will also be described later in the description of FIG. 3-4.

In FIG. 3 shows an embodiment of a method for generating a data transmission mode. In step 301, the mobile device 130 is connected to the computer 110 using the adapter 120 via a wired data interface, while the computer 110 is a power source for both the security adapter 120 and the mobile device 130 through the adapter 120, where the adapter 120 blocks the transmission of data between the mobile device 130 and computer 110 until the formation of the data transfer mode.

At step 302, the decision module 121 on the adapter 120 determines the presence or absence of a request from the computer 110 to establish a connection with the mobile device 130 for the purpose of exchanging data for the time specified by the adapter 120. When connecting to an unknown computer 110 for the first time (i.e., to the computer to which the mobile device is connected for the first time, and, for example, the security level for this computer is not stored in the local database 132), the adapter 120 is configured to transmit electricity from the computer to the mobile device 130 and for blocking data transmission between mobile device 130 and computer 110. In this example, the absence of a request in the example is considered to be the absence of a request from computer 110 to adapter 120 during the wait time specified by adapter 120 I request after connecting to computer 110 (for example, 2 seconds).

At step 303, a request to determine the security level is sent to the mobile device using the adapter 120 through the transceiver 3 (127), and the request contains information on the presence or absence of a request from the computer 110 to establish a connection with the mobile device 103 for data exchange during the time specified by the adapter 120.

Data transfer is blocked by opening data lines (for example, in USB 2.0 - contacts D + and D-). The disconnection of data lines can occur either mechanically using a switch, or using a relay or optoelectronic circuit.

Using the analysis tool 131, environmental parameters are collected in step 304. The following parameters are called the environmental parameters in the invention: the coordinates of the mobile device 130 at the time of connection to the computer 110, the received information about the presence or absence of a request to establish a connection. Next, at step 305, the mobile application 103 determines the security level using the environment settings, where the security level is low or high and determines the likelihood that the connection to the computer 110 with the collected environment settings is secure.

Mobile device 130 transmits the received security level to decision module 121 located on adapter 120 in step 306.

Next, at step 307, the adapter 120 determines the number of new requests to establish a connection with the mobile device 130 while waiting for the security level from the mobile device 130. That is, from the moment the adapter requested a security level in step 303 until the security level is obtained in step 306 .

At step 308, adapter 120 selects a rule for generating a data transfer mode between mobile device 130 and computer 110 from memory module 124 based on the received security level and the counted number of new connection requests, where the rule for generating data transfer mode is at least one of the following:

- continue blocking the data transfer if the security level is high, but while receiving the security level, the computer 110 sent new requests to the adapter 120 to establish a connection with the mobile device 130 in excess of the value specified in the memory module;

- continue blocking data transmission if the security level is low;

- Unlock data transfer in all other cases.

As a result, at step 309, the adapter 120 generates a data transfer mode according to the selected rule.

As mentioned earlier, data transfer is blocked by opening data lines (for example, in USB 2.0 - contacts D + and D-). The disconnection of data lines can occur either mechanically using a switch, or using a relay. Unlocking data transfer occurs in the opposite way - by closing the data lines.

Thus, if, according to the generated data transfer mode, data blocking continues, then user data cannot be received by computer 110. Therefore, in this case, a technical result is achieved, i.e. user data protection is provided.

At the same time, the data transfer mode, according to which data is transferred between the computer 110 and the mobile device 130, will be formed only when the system makes sure that the data transfer between the devices is secure based on the previous connections of the mobile devices to the computer 110. And, therefore, in this case, a technical result is also achieved, i.e. user data protection is provided.

In a particular embodiment, the security level using environmental parameters is determined as follows:

a) send using the mobile device 130 through the transceiver 1 (134) through the computer network 150 environment parameters to the remote server 140;

b) in response from the remote server 140, a security level is obtained using the mobile device 130.

In this example, the remote server 140 analyzes the environment parameters, determines the security level and transmits it to the mobile device 130. Hereinafter, a more detailed description of the process of analyzing the environment parameters by the remote server 140 will be given.

In another particular embodiment, the security level using the environment parameters is determined in the local database 132 of the mobile device 130, which stores the security levels previously downloaded from the remote server 140.

In another particular embodiment, the coordinates of the mobile device 130 are determined using one of:

a) the receiver of the geolocation system;

b) a cellular communication module (for example, a GSM module or an LTE module) that determines locations by signals from base stations;

c) using data received from devices of the community of users of the system.

In a particular embodiment, the environmental parameters further include the following location criterion for the mobile device 130: indoors or outdoors.

In another private embodiment, the location of the mobile devices 130 in the room is determined using the following methods:

a) comparing geolocation data with a location map;

b) analysis of the audio signal using a microphone;

c) comparing the degree of similarity of images received from the camera with a predetermined set of images;

d) analysis of temperature indicators;

d) analysis of moisture indicators;

e) analysis of barometer indicators;

g) analysis of indicators of the light sensor;

h) analysis of proximity sensor indicators;

i) analysis of indicators of the magnetic field sensor.

In this example, a metric analysis can be performed by comparing metric values with that value for a known location.

In another particular embodiment, the location of the mobile device 130 is determined by comparing said sensor data with the sensor data of other mobile devices from which the remote server 140 received environmental parameters and determined their location.

In another particular embodiment, the environmental parameters further include weather characteristics determined using sensors:

a) an ultraviolet radiation sensor;

b) ambient temperature sensor;

c) a barometer;

d) humidity sensor;

d) light sensor;

e) dosimeter.

In a particular embodiment, the rule for generating a data transfer mode between the mobile device 130 and the computer 110 is further as follows: unlock the data transfer, if the user has received the command to unlock the data transfer to the input device 122.

In FIG. 4 illustrates an embodiment of a method for determining a security level using a remote server 140, which was previously mentioned in step 305.

At step 401, the processing means 142 receives from one or more mobile devices 130 through a computer network 150 a set of environmental parameters. The set of environment parameters contains:

- the coordinates of the mobile device 130 at the time of connection to the computer 110;

- information about the presence or absence within a time specified by the adapter 120 of the request to establish a connection with the mobile device 130 for exchanging data.

At step 402, the processing means 142 also receives from the mobile device 130 a data mode flag for each set of environmental parameters. This flag is equal to one if, using a mobile device, data transfer between the mobile device 130 and computer 110 was allowed. Otherwise, the flag is zero. Permission for data transmission can be obtained, for example, from a user through an input device 122 on an adapter 120 or using a mobile device 130.

At step 403, the processing means 142 stores the environment parameters and the flag of the data transfer mode to the environment database 143 corresponding to each set of environment parameters.

At step 404, using the analysis tool 141, a security level is set for each set of environmental parameters depending on the environmental parameters and the value of the data transmission mode flag in accordance with the rules for setting the security level, while the security level is used by the mobile device 130 when generating the data transfer mode between the mobile device 130 and computer 110.

Thus, setting the security level and its use in the formation of the data transfer mode between the mobile device 130 and the computer 110 protects the user data and, therefore, ensures the achievement of a technical result.

In a particular embodiment, the analysis tool 141 sets the same security level for sets of environmental parameters that match with a given accuracy.

и для обоих наборов присутствует запрос на установление соединения), они будут иметь одинаковый идентификатор окружения, например, 1. Стоит отметить что для измерения расстояния может быть использована любая другая мера, в том числе использующая три координаты (широта, долгота, высота над уровнем моря).For example, the first set of environment parameters contains the coordinates X1, Y1 and information about the presence of a request to establish a connection. The second set of parameters contains the coordinates X2, Y2 and information about the presence of a request to establish a connection. In this example, if the environmental parameters for the two sets coincide with the specified accuracy (for example, the distance between the sets should be less than 20 meters:

and for both sets there is a request to establish a connection), they will have the same environment identifier, for example, 1. It is worth noting that any other measure can be used to measure the distance, including using three coordinates (latitude, longitude, altitude )

In a particular embodiment, the rules for setting the security level are as follows:

- if there is no request from the computer in the environment settings to establish a connection with the mobile device, then a high value of the security level is set, which determines the high probability that the connection of the mobile device to the computer is safe;

- if the number of sets of environment parameters that coincide with a given accuracy, for which the data transfer mode flag is equal to one, divided by the number of all sets of environment parameters from the environment database above a specified number, and also in the environment parameters there is a request from the computer to establishing a connection with a mobile device, then set a high value for the security level;

- in all other cases, they set a low value of the security level, which determines the low probability that the connection of the mobile device to the computer is safe.

The embodiments described in the description of FIG. 3 are also applicable to the method of FIG. four.

The likelihood that the connection is secure can be calculated in many ways. For example, the probability may be equal to the number of permissions to carry out data transfer when a mobile device is connected to this computer. For example, if 1000 mobile devices were ever connected to a computer, and 500 users of mobile devices allowed data transfer, then the probability is 50%. The probability value at which the security level is considered high can be pre-set, for example, equal to 50%. In this example, the security level is high. At the same time, if out of 1000 connections to a computer in only 100 cases, users of mobile devices allowed data transfer, the security level will be low.

It is worth noting that to calculate the probability that the connection is secure, any known methods of probability theory and mathematical statistics can be used based on data received from users of the system.

The analyzer 141 may store the specified security level in the database of security levels 144, which contains at least one value of the security level.

As a result, in response to a new request from the mobile device 130 containing environmental parameters for a new connection of the mobile device 130 to the computer 110, the analysis tool 141 transfers the security level from the database of security levels 141 corresponding to the obtained environmental parameters to the mentioned mobile device 130.

FIG. 5 is an example of a general purpose computer system, a personal computer or server 20 comprising a central processor 21, a system memory 22, and a system bus 23 that contains various system components, including memory associated with the central processor 21. The system bus 23 is implemented as any prior art bus structure comprising, in turn, a bus memory or a bus memory controller, a peripheral bus and a local bus that is capable of interacting with any other bus architecture. The system memory contains read-only memory (ROM) 24, random access memory (RAM) 25. The main input / output system (BIOS) 26, contains basic procedures that ensure the transfer of information between the elements of the personal computer 20, for example, at the time of loading the operating ROM systems 24.

The personal computer 20 in turn contains a hard disk 27 for reading and writing data, a magnetic disk drive 28 for reading and writing to removable magnetic disks 29, and an optical drive 30 for reading and writing to removable optical disks 31, such as a CD-ROM, DVD -ROM and other optical information carriers. The hard disk 27, the magnetic disk drive 28, the optical drive 30 are connected to the system bus 23 through the interface of the hard disk 32, the interface of the magnetic disks 33 and the interface of the optical drive 34, respectively. Drives and associated computer storage media are non-volatile means of storing computer instructions, data structures, software modules and other data of a personal computer 20.

The present description discloses an implementation of a system that uses a hard disk 27, a removable magnetic disk 29, and a removable optical disk 31, but it should be understood that other types of computer storage media 56 that can store data in a form readable by a computer (solid state drives, flash memory cards, digital disks, random access memory (RAM), etc.) that are connected to the system bus 23 through the controller 55.

Computer 20 has a file system 36 where the recorded operating system 35 is stored, as well as additional software applications 37, other program modules 38, and program data 39. The user is able to enter commands and information into personal computer 20 via input devices (keyboard 40, keypad “ the mouse "42). Other input devices (not displayed) can be used: microphone, joystick, game console, scanner, etc. Such input devices are, as usual, connected to the computer system 20 via a serial port 46, which in turn is connected to the system bus, but can be connected in another way, for example, using a parallel port, a game port, or a universal serial bus (USB). A monitor 47 or other type of display device is also connected to the system bus 23 via an interface such as a video adapter 48. In addition to the monitor 47, the personal computer can be equipped with other peripheral output devices (not displayed), for example, speakers, a printer, etc. .

The personal computer 20 is capable of operating in a networked environment, using a network connection with another or more remote computers 49. The remote computer (or computers) 49 are the same personal computers or servers that have most or all of the elements mentioned earlier in the description of the creature the personal computer 20 of FIG. 5. Other devices, such as routers, network stations, peer-to-peer devices, or other network nodes, may also be present on the computer network.

Network connections can form a local area network (LAN) 50 and a wide area network (WAN). Such networks are used in corporate computer networks, internal networks of companies and, as a rule, have access to the Internet. In LAN or WAN networks, the personal computer 20 is connected to the local area network 50 via a network adapter or network interface 51. When using the networks, the personal computer 20 may use a modem 54 or other means of providing communication with a global computer network such as the Internet. The modem 54, which is an internal or external device, is connected to the system bus 23 via the serial port 46. It should be clarified that the network connections are only exemplary and are not required to display the exact network configuration, i.e. in reality, there are other ways to establish a technical connection between one computer and another.

In accordance with the description, components, execution steps, data structure described above can be performed using various types of operating systems, computer platforms, programs.

In conclusion, it should be noted that the information provided in the description are examples that do not limit the scope of the present invention defined by the claims.

Claims (72)

1. The way to set the security level of the connection, in which: a) receive at least one set of environmental parameters from at least one mobile device using the processing means, while the set of environmental parameters contains: - coordinates of the mobile device at the time of connection to the computer; - information on the presence or absence within a specified time of a request from a computer to establish a connection with a mobile device for exchanging data; b) receive a data transmission mode flag for each set of environmental parameters from the mobile device using the processing tool, the flag being equal to one if data transmission between the mobile device and the computer was allowed using the mobile device and equal to zero otherwise; c) save the environment parameters and the flag of the data transfer mode corresponding to each set of environment parameters into the environment database using the processing means; d) using the analysis tool, set the security level for each set of environmental parameters depending on the environmental parameters and the flag value of the data transfer mode in accordance with the rules for setting the security level, while the security level is used by the mobile device in the formation of the data transfer mode between the mobile device and the computer . 2. The method according to p. 1, in which using the analysis tool sets the same level of security for sets of environmental parameters that match each other with a given accuracy. 3. The method according to p. 2, in which the rules for setting the security level are as follows: - if there is no request from the computer in the environment settings to establish a connection with the mobile device, then a high value of the security level is set, which determines the high probability that the connection of the mobile device to the computer is safe; - if the number of sets of environment parameters that coincide with a given accuracy, for which the data transfer mode flag is equal to one, divided by the number of all sets of environment parameters from the environment database above a specified number, and also in the environment parameters there is a request from the computer to establishing a connection with a mobile device, then set a high value for the security level; - in all other cases, they set a low value of the security level, which determines the low probability that the connection of the mobile device to the computer is safe. 4. The method according to p. 1, in which the coordinates of the mobile device is determined using a mobile device using at least one of: - receiver of the geolocation system; - a cellular communication module that determines locations by signals from base stations; - data received from devices of the community of users of the system. 5. The method according to claim 1, in which the environmental parameters further include the location of the mobile device indoors or outdoors. 6. The method according to p. 5, in which using a mobile device to determine the location of the aforementioned mobile device in the room using at least one of the methods: - Comparison of geolocation data with a map of the area; - analysis of the audio signal using a microphone; - comparing the degree of similarity of images obtained from the camera with a predetermined set of images; - analysis of temperature sensor indicators; - analysis of humidity sensor indicators; - analysis of barometer indicators; - analysis of indicators of the light sensor; - analysis of proximity sensor indicators; - analysis of indicators of the magnetic field sensor. 7. The method according to p. 6, in which using a mobile device determines the location of the aforementioned mobile device by comparing the said sensor data with the sensor data of other mobile devices. 8. The method according to p. 1, in which the environmental parameters further include weather characteristics determined using at least one of the sensors: - ultraviolet radiation sensor; - medium temperature sensor; - barometer; - humidity sensor; - light sensor; - dosimeter. 9. A system for setting the security level of a connection, comprising: a) at least one mobile device containing at least one set of environmental parameters, the set of environmental parameters contains: - coordinates of the mobile device at the time of connection to the computer; - information on the presence or absence within a specified time of a request from a computer to establish a connection with a mobile device for exchanging data; - a processing tool located on a remote server and associated with a mobile device, designed to: - receiving at least one set of environmental parameters from at least one mobile device; - receiving from the mobile device for each set of environmental parameters the flag of the data transfer mode, the flag being equal to one if data transmission between the mobile device and the computer was allowed using the mobile device, and equal to zero otherwise; - saving to the environment database the environment parameters and the corresponding to each set of environment parameters flag of the data transfer mode; b) an analysis tool located on a remote server and associated with a processing tool designed to set the security level for each set of environmental parameters depending on the environmental parameters and the value of the data transfer mode flag in accordance with the rules for setting the security level, while the security level is used by the mobile device when forming a data transfer mode between a mobile device and a computer. 10. The system according to claim 9, in which the analysis tool is designed to set the same level of security for sets of environmental parameters that match each other with a given accuracy. 11. The system according to p. 10, in which the rules for setting the security level are as follows: - if there is no request from the computer in the environment settings to establish a connection with the mobile device, then a high value of the security level is set, which determines the high probability that the connection of the mobile device to the computer is safe; - if the number of sets of environment parameters that coincide with a given accuracy, for which the data transfer mode flag is equal to one, divided by the number of all sets of environment parameters from the environment database above a specified number, and also in the environment parameters there is a request from the computer to establishing a connection with a mobile device, then set a high value for the security level; - in all other cases, they set a low value of the security level, which determines the low probability that the connection of the mobile device to the computer is safe. 12. The system of claim 9, wherein the coordinates of the mobile device are determined using said mobile device using at least one of: - receiver of the geolocation system; - a cellular communication module that determines locations by signals from base stations; - data received from devices of the community of users of the system. 13. The system of claim 9, wherein the environmental parameters further include the location of the mobile device indoors or outdoors. 14. The system of claim 13, wherein the location of said mobile device is determined using a mobile device in the building using at least one of the methods: - Comparison of geolocation data with a map of the area; - analysis of the audio signal using a microphone; - comparing the degree of similarity of images obtained from the camera with a predetermined set of images; - analysis of temperature sensor indicators; - analysis of humidity sensor indicators; - analysis of barometer indicators; - analysis of indicators of the light sensor; - analysis of proximity sensor indicators; - analysis of indicators of the magnetic field sensor. 15. The system of claim 14, wherein, using a mobile device, the location of said mobile device is determined by comparing said sensor data with sensor data of other mobile devices. 16. The system of claim 9, wherein the environmental parameters further include weather characteristics determined using at least one of the sensors: - ultraviolet radiation sensor; - medium temperature sensor; - barometer; - humidity sensor; - light sensor; - dosimeter.

Images