OFFLINE DATA DELETE WITH FALSE TRIGGER PROTECTION

• US 20080301820A1
• Filed: 05/29/2008
• Published: 12/04/2008
• Est. Priority Date: 05/29/2007
• Status: Active Grant

• Current Assignee: Absolute Software Corporation
• Original Assignee: Absolute Software Corporation
• Inventors: Stevens, Jon
• Granted Patent: US 9,154,499 B2
• Time in Patent Office: Days
• US Class Current: 726/28
• CPC Class Codes: G06F 21/88 Detecting or preventing theft or loss
• CPC Class Codes: H04L 63/0846 using time-dependent-passwords, e.g. periodically changing passwords

Abstract

Systems and methods for protecting data stored on an electronic device from access by an illegitimate user are presented. The data is protected by activating an offline data delete module installed in the electronic device to conditionally delete the data according to the following criteria: after establishing a first communication between an agent installed in the electronic device and a remote server, obtaining a password from a user if a second communication is not established between the agent and the remote server within a predetermined period of time. After obtaining a password from the user, deleting at least some data stored on the electronic device after a second communication is not established between the agent and the remote server within the predetermined period of time and a predetermined number of incorrect passwords has been obtained.

Claims

1. A method for protecting data stored on an electronic device from access by an illegitimate user by activating an offline data delete module installed in the electronic device to conditionally delete the data, the method comprising the steps of:

establishing a first communication between an agent installed in the electronic device and a remote server;

obtaining a password from a user if a second communication is not established between the agent and the remote server within a predetermined period of time for establishing a communication between the agent and the remote server;

deleting data stored on the electronic device after a second communication is not established between the agent and the remote server within the predetermined period of time and a predetermined number of incorrect passwords has been obtained.

2. The method of claim 1 further comprising restarting the measurement of the predetermined period of time if a second communication is established between the agent and the remote server before the expiration of the predetermined period of time.

3. The method of claim 1 further comprising restarting the measurement of the predetermined period of time upon obtaining a correct password from the user.

4. The method of claim 1 further comprising allowing otherwise normal operation of the electronic device while deleting the data stored on the electronic device.

5. The method of claim 1 further comprising writing identification information for the data to a log file and subsequently uploading the log file to the server from the electronic device.

6. The method of claim 1 further comprising rebooting the electronic device if the second communication is not established between the agent and the remote server before the expiration of the predetermined period of time.

7. The method of claim 1 further comprising continuing deletion of the data if the deletion is interrupted by shutting down or rebooting the electronic device.

8. The method of claim 1 further comprising suspending the obtaining of a password from the user after the predetermined number of incorrect passwords has been obtained.

9. An electronic device comprising a memory for the storage of data, an output interface, an input interface, an agent, and an offline data delete module, wherein the agent is configured to communicate with a remote server and the offline data delete module is configured to:

establish a first communication between an agent installed in the electronic device and a remote server;

obtain a password from a user if a second communication is not established between the agent and the remote server within a predetermined period of time for establishing a communication between the agent and the remote server;

delete at least some data stored on the electronic device after a second communication is not established between the agent and the remote server within the predetermined period of time and a predetermined number of incorrect passwords has been obtained.

10. The electronic device of claim 9, wherein the offline data delete module is further configured to restart the measurement of the predetermined period of time if a second communication is established between the agent and the remote server before the expiration of the predetermined period of time.

11. The electronic device of claim 9, wherein the offline data delete module is further configured to restart the measurement of the predetermined period of time upon obtaining a correct password from the user.

12. The electronic device of claim 9, wherein the offline data delete module is further configured to allow otherwise normal operation of the electronic device while deleting the at least some data stored on the electronic device.

13. The electronic device of claim 9, wherein the offline data delete module is further configured to write identification information for the at least some data to a log file and upload the log file to the remote server.

14. The electronic device of claim 9, wherein the offline data delete module is further configured to reboot the electronic device if the second communication is not established between the agent and the remote server before the expiration of the predetermined period of time.

15. The electronic device of claim 9, wherein the offline data delete module is further configured to continue deletion of the at least some data if the deletion is interrupted by shutting down or rebooting the electronic device.

16. The electronic device of claim 9, wherein the offline data delete module is further configured to suspend obtaining passwords from the user after the predetermined number of incorrect passwords has been entered by the user.

17. A system for protecting data stored in an electronic device from unauthorized access, the system comprising a memory for the storage of said data, an output interface, and an input interface, the system further comprising an offline data delete module installed in the device, an agent installed in the device, and a server remote from the device;

wherein the agent is configured to communicate with the server; and

wherein the offline data delete module is configured to;

(a) detect the elapse of a predetermined period of time since the agent last communicated with the server;

(b) detect the input of a predetermined number of incorrect passwords by a user; and

(c) delete at least some of the data upon the detection of (a) and then (b).

18. A system for the protection of data stored in an electronic device from unauthorized access, the system comprising:

a remote server; and

an electronic device, the electronic comprising a processor, a memory storing data to be protected, an output interface, and a user input interface;

said system comprising an offline data delete module and an agent installed in the electronic device, wherein;

the agent is configured to communicate with the remote server; and

the offline data delete module is configured to;

establish a first communication between the agent and remote server;

obtain a password from a user via the user interface if a second communication is not established between the agent and remote server within a predetermined period of time for establishing a communication between the agent and the remote server;

delete data stored in the memory after a second communication is not established between the agent and remote server within the predetermined period of time and a predetermined number of incorrect passwords has been obtained.

19. The system of claim 18, wherein the offline data delete module is further configured to restart the measurement of the predetermined period of time for establishing a second communication between the agent and remote server:

if a second communication is established between the agent and remote server before the expiration of the predetermined period of time;

or

upon obtaining a correct password from the user.

20. A tangible computer-readable medium carrying computer-executable instructions which, when executed on an electronic device comprising a processor and a memory, the memory storing data to be protected from unauthorized access, carry out a method comprising:

establishing a first communication between an agent installed in the electronic device and a remote server;

obtaining a password from a user if a second communication is not established between the agent and the remote server within a predetermined period of time for establishing a communication between the agent and the remote server;

deleting at least some data stored in the memory after a second communication is not established between the agent and the remote server within the predetermined period of time and a predetermined number of incorrect passwords has been obtained.