AUTOMATIC SECURITY ACTION INVOCATION FOR MOBILE COMMUNICATIONS DEVICE

• US 20080005561A1
• Filed: 05/18/2007
• Published: 01/03/2008
• Est. Priority Date: 05/18/2006
• Status: Active Grant

• Current Assignee: Blackberry Limited
• Original Assignee: Blackberry Limited
• Inventors: Fyke, Steven, Adams, Neil, Little, Herbert, Brown, Michael
• Granted Patent: US 8,140,863 B2
• Time in Patent Office: Days
• US Class Current: 713/164
• CPC Class Codes: G06F 21/305 by remotely controlling device operation
• CPC Class Codes: G06F 21/6218 to a system of files or objects, e.g. local or distributed file system or database
• CPC Class Codes: G06F 21/88 Detecting or preventing theft or loss
• CPC Class Codes: G06F 2221/2143 Clearing memory, e.g. to prevent the data from being stolen
• CPC Class Codes: H04L 2209/80 Wireless network architectures or network communication protocols for wireless network security H04W12/00
• CPC Class Codes: H04L 63/102 Entity profiles
• CPC Class Codes: H04L 9/00 Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols
• CPC Class Codes: H04W 12/02 Protecting privacy or anonymity, e.g. protecting personally identifiable information [PII]
• CPC Class Codes: H04W 12/08 Access security
• CPC Class Codes: H04W 12/082 using revocation of authorisation
• CPC Class Codes: H04W 12/12 Detection or prevention of fraud
• CPC Class Codes: H04W 12/61 Time-dependent
• CPC Class Codes: H04W 8/02 Processing of mobility data, e.g. registration information at HLR [Home Location Register] or VLR [Visitor Location Register]; Transfer of mobility data, e.g. between HLR, VLR or external networks
• CPC Class Codes: H04W 8/245 from a network towards a terminal

Abstract

A mobile communications device, server, and method for providing security on a mobile communications device are described. In accordance with one example embodiment, the mobile communications device comprises: a processor; a communications subsystem connected to the processor operable to exchange signals with a wireless network and with the processor; a storage element connected to the processor and having a plurality of application modules and data stored thereon, the data comprising at least user application data associated with the application modules and service data including data for establishing communications with the wireless network; and a security module operable to detect policy messages received by the mobile communications device, wherein the security module is further operable to perform a security action if a first policy message to enforce a first data protection policy is received and a subsequent policy message to enforce a second data protection policy is not received within a predetermined duration from the time at which the first policy message is received; and wherein the security action comprises erasing or encrypting at least some of the data on the storage element.

Claims

1. A mobile communications device, comprising:

a processor;

a communications subsystem connected to the processor operable to exchange signals with a wireless network and with the processor;

a storage element connected to the processor and having a plurality of application modules and data stored thereon, the data comprising at least user application data associated with the application modules and service data including data for establishing communications with the wireless network; and

a security module operable to detect policy messages received by the mobile communications device,

wherein the security module is further operable to perform a security action if a first policy message to enforce a first data protection policy is received and a subsequent policy message to enforce a second data protection policy is not received within a predetermined duration from the time at which the first policy message is received; and

wherein the security action comprises erasing or encrypting at least some of the data on the storage element.

2. The mobile communications device of claim 1, wherein the first data protection policy and the second data protection policy are the same.

3. The mobile communications device of claim 1, wherein the first data protection policy and the second data protection policy are different.

4. The mobile communications device of claim 1, wherein each policy message is one of:

(i) a message to initiate a new data protection policy, the message including the data protection policy to be enforced;

(ii) a message to maintain an existing data protection policy, the message including the data protection policy to be maintained or a confirmation that the existing policy is to be enforced;

(iii) a message to modify an existing data protection policy, the message including the modified data protection policy; and

(iv) a message to terminate an existing data protection policy, wherein if the message is received within the predetermined duration, the security module is operable to terminate the data protection policy being enforced.

5. The mobile communications device of claim 4, wherein each policy message to terminate the data protection policy comprises a message which includes no data protection policy or which includes instructions to terminate the data protection policy being enforced.

6. The mobile communications device of claim 1, wherein each policy message specifies the predetermined duration between policy messages.

7. The mobile communications device of claim 1, wherein the security module is operable to determine if the first policy message received by the mobile communications device specifies that a first data protection policy is to be enforced;

wherein the security module is further operable to initiate a data protection timer for a first predetermined duration, if the security module determines that the first policy message specifies that the first data protection policy is to be enforced;

wherein the security module is operable to detect if a second policy message is received by the mobile communications device after the data protection timer has been initiated;

wherein the security module is further operable to determine if the second policy message is received within the first predetermined duration of the data protection timer and if the second policy message specifies that a second data protection policy is to be enforced;

wherein the security module is further operable to reset the data protection timer to a second predetermined duration if the second policy message specifies that the second data protection policy is to be enforced;

wherein the security module is further operable to terminate the data protection policy if the second policy message does not specify that the second data protection policy is to be enforced; and

wherein the security module is further operable to perform the security action if the second policy message is not received within the first predetermined duration of the data protection timer.

8. The mobile communications device of claim 7, wherein the first predetermined duration is provided in the first policy message, and wherein the second predetermined duration is provided in the second policy message.

9. The mobile communications device of claim 7, wherein one or more of the first predetermined duration and the second predetermined duration are configurable by a user of the mobile communications device.

10. The mobile communications device of claim 7, wherein the first predetermined duration is a first absolute time duration relative to a time when the first policy message is received, and wherein the second predetermined duration is a second absolute time duration relative to a time when the second policy message is received.

14. The mobile communications device of claim 1, wherein the security action comprises erasing at least some of the data on the storage element and overwriting the portions of the storage element where the erased data was located.

15. The mobile communications device of claim 1, wherein the security action comprises erasing substantially all of the user application data from the storage element.

16. The mobile communications device of claim 1, wherein the security action comprises erasing substantially all of the service data from the storage element.

17. The mobile communications device of claim 1, wherein the security action comprises encrypting at least some of the data on the storage element.

18. The mobile communications device of claim 1, wherein the security action comprises encrypting substantially all of the user application data from the storage element.

19. The mobile communications device of claim 1, wherein the security action comprises encrypting substantially all of the service data from the storage element.

20. The mobile communications device of claim 1, wherein the service data further includes data required to establish communications through a wireless gateway connected to the wireless network.

21. The mobile communications device of claim 1, wherein the security module is configurable by the user to erase or encrypt the data on the storage element, or selectively erase and encrypt portions of the data on the storage element.

11. A mobile communications device, comprising:

a processor;

a communications subsystem connected to the processor operable to exchange signals with a wireless network and with the processor;

a storage element connected to the processor and having a plurality of application modules and data stored thereon, the data comprising at least user application data associated with the application modules and service data including data for establishing communications with the wireless network; and

a security module operable to detect if a delayed data protection initiate command is received by the mobile communications device and initiate a delayed data protection timer for a first predetermined duration provided in the delayed data protection initiate command if a delayed data protection initiate command is received;

wherein the security module operable to, after the delayed data protection timer has been initiated, detect for;

(i) entry of a password shared by the user and the mobile communications device through the user input device within the first predetermined duration of the delayed data protection timer;

(ii) receipt by the mobile communications device of a terminate command;

or (iii) receipt by the mobile communications device of a delay command;

wherein the security module operable to terminate the delayed data protection timer if entry of the password or receipt of the terminate command is detected within the first predetermined duration;

wherein the security module operable to reset the delayed data protection timer for a second predetermined duration provided in the delay command if receipt of a delay command is detected within the first predetermined duration; and

wherein the security module operable to perform a security action comprising erasing or encrypting at least some of the data on the storage element if entry of the password, receipt of the terminate command, or receipt of a delay command is not detected within the first predetermined duration.

12. The mobile communications device of claim 11, wherein the first predetermined duration of the delayed data protection timer is a first absolute time duration relative to a time that the delayed data protection timer is initiated, and wherein the second predetermined duration of the delayed data protection timer is a second absolute time duration relative to a time that the delayed data protection timer is initiated.

13. The mobile communications device of claim 11, wherein the second predetermined duration of the delayed data protection timer ends after the first predetermined duration thereby extending the duration of the delayed data protection timer, or the second predetermined duration of the delayed data protection timer ends prior to the first predetermined duration thereby shortening the duration of the delayed data protection timer.

22. A method for providing security on a mobile communications device, the mobile communications device being configured to communicate with a wireless communications network and including a storage element having data stored thereon, the method comprising the acts of:

monitoring to detect policy messages received by the mobile communications device; and

if a first policy message to enforce a first data protection policy is received and a subsequent policy message to enforce a second data protection policy is not received within a predetermined duration from the time at which the first policy message is received, performing a security action comprising erasing or encrypting at least some of the data on the storage element.

23. The method of claim 22, wherein the first data protection policy and second data protection policy are the same or different.

24. The method of claim 22, wherein each policy message is one of:

(i) a message to initiate a new data protection policy, the message including the data protection policy to be enforced;

(ii) a message to maintain an existing data protection policy, the message including the data protection policy to be maintained or a confirmation that the existing policy is to be enforced;

(iii) a message to modify an existing data protection policy, the message including the modified data protection policy; and

(iv) a message to terminate an existing data protection policy.

25. The method of claim 22, further comprising:

if the subsequent policy message to terminate an existing data protection policy is received within the predetermined duration, terminating the data protection policy being enforced.

26. The method of claim 22, wherein each policy message to terminate the data protection policy comprises a message which includes no data protection policy or which includes instructions to terminate the data protection policy being enforced.

27. The method of claim 22, wherein each policy message specifies the predetermined duration between policy messages.

28. The method of claim 22, wherein the act of monitoring to detect policy messages received comprises:

monitoring to detect if a first policy message is received by the mobile communications device;

if a first policy message is received, determining if the first policy message specifies a data protection policy is to be enforced; and

if the policy message specifies a data protection policy is to be enforced, initiating a data protection timer for a first predetermined duration; and

monitoring, after a data protection timer has been initiated, to detect if a second policy message is received by the mobile communications device;

if a second policy message is received within the first predetermined duration of data protection timer, determining if the second policy message specifies a data protection policy is to be enforced;

if the second policy message specifies a data protection policy is to be enforced, resetting the data protection timer to a second predetermined duration;

if the second policy message does not specify a data protection policy is to be enforced, terminating the data protection policy; and

if a second policy message is not received within the first predetermined duration of data protection timer, performing the security action.

29. The method of claim 28, wherein the first predetermined duration is provided in the first policy message, and wherein the second predetermined duration is provided in the second policy message.

30. The method of claim 28, wherein one or more of the first predetermined duration and the second predetermined duration are configurable by a user of the mobile communications device.

31. The method of claim 28, wherein the first predetermined duration is a first absolute time duration relative to a time when the first policy message is received, and wherein the second predetermined duration is a second absolute time duration relative to a time when the second policy message is received.

32. The method of claim 22, further comprising:

monitoring, after a data protection timer has been initiated, to detect for a powering-off of the mobile communications device, and if a powering-off is detected, setting an auto-on time corresponding to the time remaining on the data protection timer, and if the mobile communications device is powered-off at the auto-on time, powering-on the mobile communications device and performing the security action.

33. The method of claim 32, wherein the monitoring for a powering-off of the mobile communications device is enabled and disabled by respective policy messages received on the mobile communications device.

34. The method of claim 22, further comprising:

monitoring, after a data protection timer has been initiated, to determine if a battery level falls below a predetermined threshold, and if the battery power falls below the predetermined threshold, performing the security action.

35. The method of claim 34, wherein the predetermined threshold is a level at which the mobile communications device will the operability of the communications subsystem to exchange signals with the wireless network.

36. The method of claim 34, wherein the predetermined threshold is a level below which the mobile communications device does not have enough power to perform the security action.

37. The method of claim 34, wherein one of the policy messages comprises an instruction to enable or disable the operability to determine if the battery level falls below the predetermined threshold and to perform the security action if the battery level falls below the predetermined threshold.

38. The method of claim 22, further comprising:

monitoring to detect for a locked state of the mobile communications device, initiating a lockout data protection timer for a predetermined duration upon detection of the locked state, and monitoring, after the lockout data protection timer has been initiated, to detect if a password shared by the user and the mobile communications device is entered through the user input device within the predetermined duration of the lockout data protection timer, if entry of the password is detected within the predetermined duration, terminating the lockout data protection timer, and if entry of the password is not detected within the predetermined duration, performing a security action comprising erasing or encrypting at least some of the data on the storage element.

39. The method of claim 38, further comprising:

monitoring for a trigger condition for initiating the locked state of the mobile communications device and initiating the locked state of the mobile communications device upon detection of the trigger condition.

40. The method of claim 22, further comprising:

if entry of the password is detected within the predetermined duration, terminating the locked state of the mobile communications device.

41. The method of claim 39, wherein the trigger condition is one of:

user input instructing the mobile communications device to initiate the locked state;

the occurrence of a periodic interval;

user inactivity for a predetermined duration of inactivity;

loss of communication with the wireless network;

holstering of the mobile communications device if the device is a holsterable device; and

closing of the mobile communications device if the device is a flip-style device.

42. The method of claim 38, wherein the predetermined duration of the lockout data protection timer is an absolute time duration relative to a time when the locked state is initiated.

43. The method of claim 38, wherein one of the policy messages comprises an instruction to enable or disable the detection for the locked state of the mobile communications device and detection for entry of the password shared by the user and the mobile communications device is entered.

44. The method of claim 43, wherein the predetermined duration of the lockout data protection timer is provided in the policy message enabling the detection for the locked state.

45. The method of claim 43, further comprising:

if the locked state has already been initiated, automatically initiating the lockout data protection timer upon receiving a policy message enabling the monitoring for the locked state, the lockout data protection timer being set to a predetermined duration provided in the policy message enabling the monitoring for the locked state.

46. The method of claim 43, further comprising:

if the locked state has already been initiated, automatically terminating the lockout data protection timer upon receiving a policy message disabling the monitoring for the locked state.

47. The method of claim 38, wherein, in the locked state substantially all of the functionality of the mobile communications device is restricted, user input accepted during the locked state being substantially limited to entry of the password shared by the user and the mobile communications device through the user input device.

48. The method of claim 38, wherein the act of monitoring to detect for the locked state comprises:

monitoring to detect for a lack of communication through the communications subsystem, if the duration of the lack of communication through the communications subsystem exceeds a predetermined duration, initiating the locked state of the mobile communications device.

49. The method of claim 48, wherein one of the policy messages comprises an instruction to enable or disable detection for the lack of communication and initiation of the locked state of the mobile communications device if the duration of the lack of communication through the communications subsystem exceeds a predetermined duration.

50. The method of claim 22, further comprising the acts of:

monitoring to detect if a delayed data protection initiate command is received by the mobile communications device, and if the delayed data protection initiate command is received, initiating a delayed data protection timer for a first predetermined duration provided in the delayed data protection initiate command; and

monitoring, after the delayed data protection timer has been initiated, to detect for;

(i) entry of a password shared by the user and the mobile communications device through the user input device within the first predetermined duration of the delayed data protection timer;

(ii) receipt by the mobile communications device of a terminate command;

or (iii) receipt by the mobile communications device of a delay command;

if entry of the password or receipt of the terminate command is detected within the first predetermined duration, terminating the delayed data protection timer;

if receipt of a delay command is detected within the first predetermined duration, resetting the delayed data protection timer for a second predetermined duration provided in the delay command; and

if entry of the password, receipt of the terminate command, or receipt of a delay command is not detected within the first predetermined duration, performing a security action comprising erasing or encrypting at least some of the data on the storage element.

51. The method of claim 50, wherein the first predetermined duration of the delayed data protection timer is a first absolute time duration relative to a time that the delayed data protection timer is initiated, and wherein the second predetermined duration of the delayed data protection timer is a second absolute time duration relative to a time that the delayed data protection timer is initiated.

52. The method of claim 50, wherein the second predetermined duration of the delayed data protection timer ends after the first predetermined duration thereby extending the duration of the delayed data protection timer, or the second predetermined duration of the delayed data protection timer ends prior to the first predetermined duration thereby shortening the duration of the delayed data protection timer.

57. The method of claim 22, wherein the security action comprises erasing substantially all of the user application data from the storage element.

58. The method of claim 22, wherein the security action comprises erasing substantially all of the service data from the storage element.

59. The method of claim 22, wherein the security action comprises encrypting at least some of the data on the storage element.

60. The method of claim 22, wherein the security action comprises encrypting substantially all of the user application data from the storage element.

61. The method of claim 22, wherein the security action comprises encrypting substantially all of the service data from the storage element.

62. The method of claim 22, wherein the service data further includes data required to establish communications through a wireless gateway connected to the wireless network.

63. The method of claim 22, wherein the security action is configurable by the user to erase or encrypt the data on the storage element, or selectively erase and encrypt portions of the data on the storage element.

53. A method for providing security on a mobile communications device, the mobile communications device being configured to communicate with a wireless communications network and including a storage element having data stored thereon, the method comprising the acts of:

monitoring to detect if a delayed data protection initiate command is received by the mobile communications device, and if the delayed data protection initiate command is received, initiating a delayed data protection timer for a first predetermined duration provided in the delayed data protection initiate command;

monitoring, after the delayed data protection timer has been initiated, to detect for;

(i) entry of a password shared by the user and the mobile communications device through the user input device within the first predetermined duration of the delayed data protection timer;

(ii) receipt by the mobile communications device of a terminate command;

or (iii) receipt by the mobile communications device of a delay command;

if entry of the password or receipt of the terminate command is detected within the first predetermined duration, terminating the delayed data protection timer;

if receipt of a delay command is detected within the first predetermined duration, resetting the delayed data protection timer for a second predetermined duration provided in the delay command; and

if entry of the password, receipt of the terminate command, or receipt of a delay command is not detected within the first predetermined duration, performing a security action comprising erasing or encrypting at least some of the data on the storage element.

54. The method of claim 53, wherein the first predetermined duration of the delayed data protection timer is a first absolute time duration relative to a time that the delayed data protection timer is initiated, and wherein the second predetermined duration of the delayed data protection timer is a second absolute time duration relative to a time that the delayed data protection timer is initiated.

55. The method of claim 53, wherein the second predetermined duration of the delayed data protection timer ends after the first predetermined duration thereby extending the duration of the delayed data protection timer, or the second predetermined duration of the delayed data protection timer ends prior to the first predetermined duration thereby shortening the duration of the delayed data protection timer.

56. The method of 22, wherein the security action comprises erasing at least some of the data on the storage element and overwriting the portions of the storage element where the erased data was located.

64. A server for providing security on at least one mobile communications device, the server being configured to communicate with a plurality of mobile communications devices over a wireless network, the server comprising:

a processor;

a communications subsystem connected to the processor for exchanging signals with the wireless network and with the processor; and

a security module for sending policy messages to one or more of the devices in the plurality of mobile communications devices associated with the server at predetermined intervals in accordance with a predetermined frequency, the policy messages including instructions for execution by the one or more of the devices to enforce or terminate a data protection policy.

65. The server of claim 64, wherein the policy messages to enforce a data protection policy comprise instructions for execution by the one or more of the devices to perform a security action comprising erasing or encrypting at least some of the data on the storage element if a subsequent policy message to enforce a data protection policy is not received within a predetermined duration from the time at which a previous policy message is received.

66. The server of claim 64, wherein each policy message to enforce a data protection policy is one of:

(i) a message to initiate a data protection policy, the message including the data protection policy to be enforced;

(ii) a message to maintain an existing data protection policy, the message including the data protection policy or a confirmation that the existing policy is to be enforced;

(iii) a message to modify an existing data protection policy, the message including the modified data protection policy;

or (iv) a message to terminate an existing data protection policy is received within the predetermined duration.

67. The server of claim 66, wherein modified policy messages are sent immediately upon a change in the respective data protection policy.

68. The server of claim 66, wherein modified policy messages are sent at a next interval.

69. The server of claim 66, wherein the time at which modified policy messages are sent is configurable.

70. The server of claim 66, wherein each policy message to terminate an existing data protection policy comprises a message which includes no data protection policy or which includes instructions to terminate a data protection policy being enforced.

71. The server of claim 66, wherein the policy messages to initiate or maintain a data protection policy specifies the predetermined duration.

72. The server of claim 66, wherein the policy messages to modify an existing data protection policy include a modified predetermined duration.

73. The server of claim 64, wherein the predetermined duration is equal to the length of the interval between sending policy messages.

74. The server of claim 64, wherein the predetermined frequency at which the policy messages are sent is configurable.

75. The server of claim 64, wherein the policy messages are sent globally to all mobile communications devices associated with the server, to groups or classes of mobile communications devices associated with the server, or to one or more individual mobile communications devices associated with the server.

76. The server of claim 64, wherein the policy messages comprise instructions for execution by the one or more of the devices to perform

monitoring, to detect if a first policy message is received by the mobile communications device;

if a first policy message is received, determining if the first policy message specifies a data protection policy is to be enforced; and

if the policy message specifies a data protection policy is to be enforced, initiating a data protection timer for a first predetermined duration; and

monitoring, after a data protection timer has been initiated, to detect if a second policy message is received by the mobile communications device;

if a second policy message is received within the first predetermined duration of data protection timer, determining if the second policy message specifies a data protection policy is to be enforced;

if the second policy message specifies a data protection policy is to be enforced, resetting the data protection timer to a second predetermined duration;

if the second policy message does not specify a data protection policy is to be enforced, terminating the data protection policy; and

if a second policy message is not received within the first predetermined duration of data protection timer, performing a security action comprising erasing or encrypting at least some of the data on the storage element.

77. The server of claim 76, wherein the policy messages comprise instructions for execution by the one or more of the devices to perform monitoring, after a data protection timer has been initiated, to detect for a powering-off of the mobile communications device, and if a powering-off is detected, setting an auto-on time corresponding to the time remaining on the data protection timer, and if the mobile communications device is powered-off at the auto-on time, powering-on the mobile communications device and performing a security action comprising erasing or encrypting at least some of the data on the storage element.

78. The server of claim 76, wherein the policy messages comprise instructions for execution by the one or more of the devices to perform monitoring, after a data protection timer has been initiated, to determine if a battery level falls below a predetermined threshold, and if the battery power falls below the predetermined threshold, performing a security action comprising erasing or encrypting at least some of the data on the storage element.

79. The server of claim 76, wherein the policy messages comprise instructions for execution by the one or more of the devices to perform monitoring to detect for a locked state of the mobile communications device, initiating a lockout data protection timer for a predetermined duration upon detection of the locked state, and monitoring, after the lockout data protection timer has been initiated, to detect if a password shared by the user and the mobile communications device is entered through the user input device within the predetermined duration of the lockout data protection timer, if entry of the password is detected within the predetermined duration, terminating the lockout data protection timer, and if entry of the password is not detected within the predetermined duration, performing a security action comprising erasing or encrypting at least some of the data on the storage element.

80. The server of claim 64, wherein the policy messages comprise instructions for execution by the one or more of the devices to perform:

monitoring to detect if a delayed data protection initiate command is received by the mobile communications device, and if a delayed data protection initiate command is received, initiating a delayed data protection timer for a first predetermined duration provided in the delayed data protection initiate command; and

monitoring, after the delayed data protection timer has been initiated, to detect for;

(i) entry of a password shared by the user and the mobile communications device through the user input device within the first predetermined duration of the delayed data protection timer;

(ii) receipt by the mobile communications device of a terminate command;

or (iii) receipt by the mobile communications device of a delay command;

if entry of the password or receipt of the terminate command is detected within the first predetermined duration, terminating the delayed data protection timer;

if receipt of a delay command is detected within the first predetermined duration, resetting the delayed data protection timer for a second predetermined duration provided in the delay command; and

if entry of the password, receipt of the terminate command, or receipt of a delay command is not detected within the first predetermined duration, performing a security action comprising erasing or encrypting at least some of the data on the storage element.

81. The server of claim 80, wherein the first predetermined duration of the delayed data protection timer is a first absolute time duration relative to a time that the delayed data protection timer is initiated, and wherein the second predetermined duration of the delayed data protection timer is a second absolute time duration relative to a time that the delayed data protection timer is initiated.

82. The server of claim 80, wherein the second predetermined duration of the delayed data protection timer ends after the first predetermined duration thereby extending the duration of the delayed data protection timer, or the second predetermined duration of the delayed data protection timer ends prior to the first predetermined duration thereby shortening the duration of the delayed data protection timer.

83. The server of claim 64, wherein the security action comprises erasing at least some of the data on the storage element and overwriting the portions of the storage element where the erased data was located.

84. The server of claim 64, wherein the security action comprises encrypting at least some of the data on the storage element.

85. A mobile communications device, comprising:

a processor;

a communications subsystem connected to the processor operable to exchange signals with a wireless network and with the processor;

a storage element connected to the processor and having a plurality of application modules and data stored thereon, the data comprising at least user application data associated with the application modules and service data including data for establishing communications with the wireless network; and

a security module operable to detect policy messages received by the mobile communications device,

wherein the security module is operable to perform a security action if a first policy message to enforce a first data protection policy is received and a subsequent policy message to enforce a second data protection policy is not received within a first predetermined duration from a time at which the first policy message is received;

wherein the security action comprises erasing or encrypting at least some of the data on the storage element;

wherein the security module is operable to determine if a battery level falls below a predetermined threshold;

wherein the security module is operable to perform the security action if the battery power falls below the predetermined threshold;

wherein the security module is operable to detect if a delayed data protection initiate command is received by the mobile communications device;

wherein the security module is operable to initiate a delayed data protection timer for a second predetermined duration if the delayed data protection initiate command is received;

wherein the security module is operable to, after the delayed data protection timer has been initiated, detect;

(i) entry of a password shared by the user and the mobile communications device through a user input device within the first predetermined duration of the delayed data protection timer;

(ii) receipt by the mobile communications device of a terminate command;

or (iii) receipt by the mobile communications device of a delay command;

wherein the security module is operable to terminate the delayed data protection timer if entry of the password or receipt of the terminate command is detected within the second predetermined duration;

wherein the security module is operable to reset the delayed data protection timer for a third predetermined duration provided in the delay command if receipt of a delay command is detected within the second predetermined duration; and

wherein the security module is operable to perform the security action if entry of the password, receipt of the terminate command, or receipt of a delay command is not detected within the second predetermined duration.

86. A communications system for providing security on a mobile communications device, comprising:

one or more mobile communications devices, each comprising;

a processor;

a communications subsystem connected to the processor operable to exchange signals with a wireless network and with the processor;

a storage element connected to the processor and having a plurality of application modules and data stored thereon, the data comprising at least user application data associated with the application modules and service data including data for establishing communications with the wireless network; and

a security module operable to detect policy messages received by the mobile communications device,

wherein the security module is further operable to perform a security action if a first policy message to enforce a first data protection policy is received and a subsequent policy message to enforce a second data protection policy is not received within a predetermined duration from a time at which the first policy message is received; and

wherein the security action comprises erasing or encrypting at least some of the data on the storage element; and

a server comprising;

a processor;

a communications subsystem connected to the processor for exchanging signals with the wireless network and with the processor; and

a security module for sending policy messages to the one or more mobile communications devices at predetermined intervals in accordance with a predetermined frequency, the policy messages including instructions for execution by the one or more of the mobile communications devices to enforce or terminate a data protection policy.

87. A computer program product comprising a machine-readable medium tangibly embodying instructions executable on a mobile communications device for providing security on the mobile communications device, the machine-readable instructions comprising:

code for monitoring to detect policy messages received by the mobile communications device; and

code for performing a security action comprising erasing or encrypting at least some of the data on the storage element if a first policy message to enforce a first data protection is received and a subsequent policy message to enforce a second data protection policy is not received within a predetermined duration from a time at which the first policy message is received.