System and Method to Govern Data Exchange with Mobile Devices

• US 20120240238A1
• Filed: 03/18/2011
• Published: 09/20/2012
• Est. Priority Date: 03/18/2011
• Status: Active Grant

• Current Assignee: International Business Machines Corporation
• Original Assignee: International Business Machines Corporation
• Inventors: Gates, Stephen Carl, Park, Youngja, Rao, Josyula R., Teiken, Wilfried
• Granted Patent: US 8,560,722 B2
• Time in Patent Office: Days
• US Class Current: 726/26
• CPC Class Codes: H04N 21/41407 embedded in a portable device, e.g. video client on a mobile phone, PDA, laptop constructional details of equipment or arrangements specially adapted for portable computer application G06F1/1626; arrangements specially adapted for mobile receivers in broadcast systems H04H20/57
• CPC Class Codes: H04N 21/4334 Recording operations recording of a television signal H04N5/76; arrangements for recording or accumulating broadcast information or broadcast-related information H04H60/27
• CPC Class Codes: H04N 21/4335 Housekeeping operations, e.g. prioritizing content for deletion because of storage space restrictions storage management, e.g. defragmentation G06F3/0604; unloading stored programs G06F9/445; storage management in file systems G06F16/10; buffering arrangements in a network node or in an end terminal in packet networks H04L49/90

Abstract

Techniques for limiting the risk of loss of sensitive data from a mobile device are provided. In one aspect, a method for managing sensitive data on a mobile device is provided. The method includes the following steps. A sensitivity of a data item to be transferred to the mobile device is determined. It is determined whether an aggregate sensitivity of data items already present on the mobile device plus the data item to be transferred exceeds a current threshold sensitivity value for the mobile device. If the aggregate sensitivity exceeds the current threshold sensitivity value, measures are employed to ensure the aggregate sensitivity remains below the current threshold sensitivity value for the mobile device. Otherwise the data item is transferred to the mobile device.

Claims

1. A method for managing sensitive data on a mobile device, comprising the steps of:

determining a sensitivity of a data item to be transferred to the mobile device;

determining whether an aggregate sensitivity of data items already present on the mobile device plus the data item to be transferred exceeds a current threshold sensitivity value for the mobile device; and

if the aggregate sensitivity exceeds the current threshold sensitivity value, employing measures to ensure the aggregate sensitivity remains below the current threshold sensitivity value for the mobile device, otherwise transferring the data item to the mobile device.

2. The method of claim 1, wherein the mobile device can access resources on an enterprise server through a mobile network connector, and wherein the data item is transferred to the mobile device when the mobile device requests the data item from the enterprise server or when the enterprise server has a new data item available for the mobile device.

3. The method of claim 1, wherein the current threshold sensitivity value reflects a level of risk associated with the mobile device.

4. The method of claim 3, further comprising the step of:

determining the level of risk associated with the mobile device based on one or more of a context to which the mobile device is currently associated, access control mechanisms provided by the mobile device and encryption mechanisms provided by the mobile device.

5. The method of claim 4, wherein the context to which the mobile device is currently associated is based on information gathered about the mobile device at a certain time interval.

6. The method of claim 5, wherein the information gathered about the mobile device comprise of one or more of sensory information from the mobile device, event information from the mobile device, and connection information from the mobile device.

7. The method of claim 5, wherein sensory information is comprised of one or more of location information for the mobile device, acceleration measurements of the mobile device, ambient light sensor information for the mobile device, proximity sensor information for the mobile device, and wireless devices currently within communication range of the mobile device.

8. The method of claim 6, wherein event information from the device comprises one of more of applications currently running on the mobile device, a number of failed logins reported by the mobile device, a number of successful logins reported by the mobile device.

9. The method of claim 6, wherein connection information is devices if any that are currently connected to the mobile device.

10. The method of claim 5, wherein the context is based on all information gathered about the mobile device during either a fixed number of time intervals or all time intervals since the location of the mobile device was changed by more than a distance threshold.

11. The method of claim 4, further comprising the step of:

changing the threshold sensitivity value whenever the risk level associated with the mobile device changes.

12. The method of claim 11, further comprising the step of:

replacing data items already on the mobile device with modified versions of the data items that were manipulated to have a lower sensitivity whenever the threshold sensitivity value decreases to ensure that the aggregate sensitivity remains below the threshold sensitivity value.

13. The method of claim 12, wherein the replaced data items are deemed not immediately needed by a user of the mobile device.

14. The method of claim 13, further comprising the step of

determining that a data item is not immediately needed based on one or more of a last time the user accessed the data item, a number of times the user accessed the data item in a predetermined period of time, a context in which the user routinely accesses the data item or a similar data item and a relationship of the data item with other data items deemed not immediately needed by the user.

15. The method of claim 14, wherein two data items are considered similar if the distance measure of the two data items in a feature vector space is below a threshold.

16. The method of claim 12, further comprising the steps of:

recording a list of the data items removed from the mobile device; and

restoring one or more of the data items on the list when the aggregate sensitivity falls below the threshold sensitivity value as long as doing so does not exceed the threshold sensitivity value.

17. The method of claim 1, wherein the step of employing measures to ensure the aggregate sensitivity remains below the current threshold sensitivity value for the mobile device comprises the steps of:

manipulating the data items already present on the mobile device to maintain the aggregate sensitivity below the current threshold sensitivity value; and

transferring the data item to the mobile device.

18. The method of claim 1, wherein the step of employing measures to ensure the aggregate sensitivity remains below the current threshold sensitivity value for the mobile device comprises the steps of:

redacting one or more portions of the data item to reduce the sensitivity of the data item resulting in a redacted version; and

transmitting the redacted version of the data item to the mobile device.

19. The method of claim 18, wherein the redacted version of the data item comprises a non-sensitive placeholder.

20. The method of claim 19, wherein the non-sensitive placeholder comprises a link to the data item to be transferred.

21. The method of claim 20, wherein a user of the mobile device can use the link to download the data item to the mobile device even when doing so would cause the aggregate sensitivity to exceed the current threshold sensitivity value for the mobile device, the method further comprising the steps of:

manipulating the data items already present on the mobile device to maintain the aggregate sensitivity below the current threshold sensitivity value; and

fulfilling the download request.

22. The method of claim 21, further comprising the steps of:

selecting a minimal set of the data items already present on the mobile device such that the sensitivity of the data item to be transferred is less than or equal to the sensitivities of the selected data items;

manipulating the selected data items such that when the download request is fulfilled the aggregate sensitivity is still maintained below the current threshold sensitivity value.

23. The method of claim 22, wherein the selected data items are deemed not immediately needed by a user of the mobile device.

24. The method of claim 23, further comprising the step of:

determining that a data item is not immediately needed based on one or more of the last time the user accessed the data item, a number of times the user accessed the data item in a predetermined period of time, a context in which the user routinely accesses the data item or a similar data item, and a relationship of this data item with other data items deemed not immediately needed by the user.

25. The method of claim 22, further comprising the steps of:

recording a list of the selected data items; and

restoring one or more of the selected data items on the list when the aggregate sensitivity falls below the threshold sensitivity value as long as doing so does not exceed the threshold sensitivity value.

26. The method of claim 25, wherein the data items that are restored are deemed immediately needed by a user of the mobile device.

27. The method of claim 26, further comprising the step of:

determining that a data item is immediately needed based on one or more of the last time the user accessed the data item, a number of times the user accessed the data item in a predetermined period of time, a context in which the user routinely accesses the data item or a similar data item, and a relationship of this data item with other data items deemed immediately needed by the user.

28. The method of claim 1, further comprising the steps of:

determining a current context of the mobile device;

predicting probable future contexts of the mobile device within a given time interval; and

determining threshold sensitivity values for all of the probable future contexts.

29. The method of claim 28, further comprising the steps of:

identifying a minimum threshold sensitivity value amongst all of the sensitivity values for the probable future contexts; and

replacing data items already on the mobile device with modified versions of the data items manipulated to have a lower sensitivity to maintain the aggregate sensitivity below the minimum threshold sensitivity value.

30. The method of claim 28, wherein the possible future contexts of the mobile device are predicted based on past actions of a user of the mobile device.

31. An apparatus for managing sensitive data on a mobile device the apparatus comprising:

a memory; and

at least one processor device, coupled to the memory, operative to;

determine a sensitivity of a data item to be transferred to the mobile device;

determine whether an aggregate sensitivity of data items already present on the mobile device plus the data item to be transferred exceeds a current threshold sensitivity value for the mobile device; and

if the aggregate sensitivity exceeds the current threshold sensitivity value, employ measures to ensure the aggregate sensitivity remains below the current threshold sensitivity value for the mobile device, otherwise transfer the data item to the mobile device.

32. An article of manufacture for managing sensitive data on a mobile device, comprising a machine-readable recordable medium containing one or more programs which when executed implement the steps of:

determining a sensitivity of a data item to be transferred to the mobile device;

determining whether an aggregate sensitivity of data items already present on the mobile device plus the data item to be transferred exceeds a current threshold sensitivity value for the mobile device; and

if the aggregate sensitivity exceeds the current threshold sensitivity value, employing measures to ensure the aggregate sensitivity remains below the current threshold sensitivity value for the mobile device, otherwise transferring the data item to the mobile device.