System and method for lost data destruction of electronic data stored on a portable electronic device which communicates with servers that are inside of and outside of a firewall

• US 20060021006A1
• Filed: 07/21/2004
• Published: 01/26/2006
• Est. Priority Date: 07/21/2004
• Status: Active Grant

• Current Assignee: Beachhead Solutions, Inc.
• Original Assignee: Beachhead Solutions, Inc.
• Inventors: Hanay, John W., Yuryev, Yuri, Williams, Cuong G., Rensin, David K., Rubin, Jeff M., Obot, James J., Montellato, David A., Lavelle, Timothy C.
• Granted Patent: US 7,540,016 B2
• Time in Patent Office: Days
• US Class Current: 726/2
• CPC Class Codes: G06F 21/6209 to a single file or object, e.g. in a secure envelope, encrypted and accessed using a key, or with access control rules appended to the object itself
• CPC Class Codes: G06F 2221/2101 Auditing as a secondary aspect
• CPC Class Codes: G06F 2221/2137 Time limited access, e.g. to a computer or data
• CPC Class Codes: G06F 2221/2143 Clearing memory, e.g. to prevent the data from being stolen
• CPC Class Codes: H04L 63/10 for controlling access to devices or network resources
• CPC Class Codes: H04L 63/14 for detecting or protecting against malicious traffic

Abstract

A data security system and method protects stored data from unauthorized access. According to one aspect of the invention, a client computing device communicates periodically with a server. If communications is note established between the client and the server for a selected activation interval and a subsequent grace period, the data is determined to be lost, and programmed security rules are automatically executed. The server with which the client computer device communicates includes one server located inside the firewall of a particular organization, or a mirror server located outside the firewall, and thereby allow for the re-setting of the activation interval when the client is properly outside of the firewall through communication with the mirror server, as well as the to provide command an control over a lost or stolen client by pushing updated rules if communication is subsequently attempted with the mirror server.

Claims

1. A method of securing data stored on a first electronic device, the first electronic device is adapted to communicate with one of a plurality of other electronic devices, the plurality of other electronic devices including an internal electronic device within a firewall and an external electronic device outside the firewall, and wherein the first electronic device including an application containing at least one preprogrammed security feature and having set therein an activation interval and a grace period, wherein the activation interval is a non-zero period and the grace period is a non-zero period, the method comprising the steps of:

automatically setting, upon communication between the first electronic device and one of the plurality of other electronic devices, an activation timer within the first electronic device;

at a point in time subsequent to the automatically setting, determining that the activation interval has elapsed based upon the activation timer;

subsequent to the elapsing of the activation interval, automatically setting a grace timer within the first electronic device;

if, prior to the grace period elapsing, communication is established between the first electronic device and the plurality of other electronic devices, re-setting the activation timer within the first electronic device based upon a signal from one of the plurality of other electronic devices; and

if communication is not established between the first electronic device and one of the plurality of other electronic devices prior to the grace period elapsing;

determining that the grace period has elapsed based upon the grace timer; and

initiating the at least one preprogrammed security feature.

2. The method according to claim 1, wherein the first electronic device is a portable electronic device.

3. The method according to claim 1, further including the step of:

allowing access to data stored within the internal electronic device when the electronic device is connected to the internal electronic device; and

disallowing access to the data stored within the internal electronic device when the electronic device is connected to the external electronic device.

4. The method according to claim 1, further including the step of:

initiating the at least one preprogrammed security feature based upon another signal from one of the plurality of other electronic devices, wherein the another signal is created by a system administrator.

5. The method according to claim 1, wherein the at least one preprogrammed security feature includes destroying the data stored on the electronic device.