Patent ID: 8381303

Claim:
In a server connected through a telecommunications network to receive data from and send data to a mobile communications device, the server having a memory and a microprocessor, and further having software components for processing, analyzing and storing data, including at least a known good component for identifying data that is recognizably safe, and a known bad component for identifying data that is recognizably malicious, a method comprising: by the server, receiving a hash identifier for data from the mobile communications device; at the server, upon receipt of a signal from the mobile communications device that an analysis of the data by a mobile communications device security component has not been able to characterize the data as recognizably safe or malicious, comparing, by the known good component, the data hash identifier against a database of identifiers of known good data which is determined to be good data by analyzing valid statefulness and structure, the database of known good identifiers being stored in memory associated with the server; if the comparison by the known good component results in a positive match, then sending an instruction to the mobile communications device to allow the data to be processed by the mobile communications device; if the comparison by the known good component does not result in a positive match, then comparing by the known bad component, the data hash identifier against a database of hash identifiers of known bad data stored in memory associated with the server; and if the comparison by the known bad component results in a positive match, then sending an instruction to the mobile communications to reject the data from being processed by the mobile communications device.