SYSTEM AND METHOD FOR REMOTE WIPE

• US 20150089659A1
• Filed: 09/19/2014
• Published: 03/26/2015
• Est. Priority Date: 09/20/2013
• Status: Active Grant

• Current Assignee: Ip Ot Sub Ulc
• Original Assignee: Open TEXT SA (Open Text Corporation)
• Inventors: Beckman, Gregory, Laird, Robert, Gagne, Alain
• Granted Patent: US 10,171,501 B2
• Time in Patent Office: Days
• US Class Current: 726/26
• CPC Class Codes: G06F 21/10 Protecting distributed programs or content, e.g. vending or licensing of copyrighted material protection in video systems or pay television H04N7/16 ; Digital rights management [DRM]
• CPC Class Codes: G06F 21/16 Program or content traceability, e.g. by watermarking
• CPC Class Codes: G06F 21/6218 to a system of files or objects, e.g. local or distributed file system or database
• CPC Class Codes: G06F 21/6227 where protection concerns the structure of data, e.g. records, types, queries
• CPC Class Codes: G06F 2221/2143 Clearing memory, e.g. to prevent the data from being stolen
• CPC Class Codes: G06F 3/04817 using icons graphical or visual programming using iconic symbols G06F8/34
• CPC Class Codes: G06F 8/65 Updates security arrangements therefor G06F21/57
• CPC Class Codes: H04L 63/02 for separating internal from external traffic, e.g. firewalls
• CPC Class Codes: H04L 63/0428 wherein the data content is protected, e.g. by encrypting or encapsulating the payload
• CPC Class Codes: H04L 63/10 for controlling access to devices or network resources
• CPC Class Codes: H04L 63/105 Multiple levels of security
• CPC Class Codes: H04L 63/20 for managing network security; network security policies in general filtering policies H04L63/0227
• CPC Class Codes: H04L 67/01 Protocols
• CPC Class Codes: H04L 67/02 based on web technology, e.g. hypertext transfer protocol [HTTP]
• CPC Class Codes: H04L 67/10 in which an application is distributed across nodes in the network software deployment G06F8/60; multiprogramming arrangements G06F9/46
• CPC Class Codes: H04L 67/56 Provisioning of proxy services store-and-forward switching systems in data switching networks H04L12/54
• CPC Class Codes: H04L 67/565 Conversion or adaptation of application format or content adding application control or application functional data H04L67/561
• CPC Class Codes: H04L 67/5683 Storage of data provided by user terminals, i.e. reverse caching
• CPC Class Codes: H04L 9/40 Network security protocols

Abstract

A remote wipe message or notification may be sent from a server computer to one or more target client devices associated with a user. A managed container running on a target client device associated with the user and having a managed cache storing content managed by or through the server computer may, in response to the remote wipe message or notification, deleting the managed content or a portion thereof from its managed cache. The managed container may send back an acknowledgement or message to the server computer that it had completed the remote wipe. The remote wipe functionality can avoid having to deal with individual applications running on the client device and therefore can eliminate the complexity of having to deal with individual applications. Furthermore, the remote wipe can be done independently of the local operating system and without affecting non-managed information/applications on the client device.

Claims

1. A method, comprising:

receiving, by a managed container embodied on non-transitory computer memory including instructions executable by a processor of a client device, a remote wipe message from an application gateway server computer over a network connection, the managed container having a managed cache storing content managed by or through the application gateway server computer; and

responsive to the remote wipe message from the application gateway server computer, the managed container deleting the content or a portion thereof from the managed cache.

2. The method according to claim 1, wherein the deleting is performed by the managed container independently of a local operating system of the client device.

3. The method according to claim 1, wherein the content comprises at least one application.

4. The method according to claim 1, further comprising:

sending, by the managed container, an acknowledgement to the application gateway server computer confirming deletion of the portion of content from the managed container.

5. The method according to claim 1, wherein the managed container comprises a program downloaded to the client device from a source on the Internet.

6. The method according to claim 1, wherein the network connection is initiated via a request for connection sent from the application gateway server computer to the client device.

7. The method according to claim 1, wherein the application gateway server computer is operable to track information on one or more devices associated with a user.

8. The method according to claim 1, wherein the client device is one of a plurality of client devices associated with a user, wherein the remote wipe message is sent from the application gateway server computer to a managed container running on each of the plurality of client devices associated with the user, and wherein, responsive to the remote wipe message from the application gateway server computer, the managed container running on each of the plurality of client devices associated with the user deleting the content or a portion thereof from its managed cache.

9. The method according to claim 1, further comprising:

maintaining a list of approved client devices;

determining that the client device is absent from the list of approved client devices; and

based on said determining, sending the remote wipe message to the managed container.

10. The method according to claim 1, wherein the content includes multiple versions of a document.

11. The method according to claim 1, wherein the content includes a document, the application gateway server sending the remote wipe message to the managed container in response to a record management operation relevant to the document and received from a backend system.

12. A system, comprising:

an application gateway server computer; and

a managed container having a managed cache storing content managed by or through the application gateway server computer, the managed container embodied on non-transitory computer memory including instructions executable by a processor of a client device for;

receiving a remote wipe message from the application gateway server computer over a network connection; and

responsive to the remote wipe message from the application gateway server computer, deleting the content or a portion thereof from the managed cache.

13. The system of claim 12, wherein the deleting is performed by the managed container independently of a local operating system of the client device.

14. The system of claim 12, wherein the content comprises at least one application.

15. The system of claim 12, wherein the managed container is further configured for sending an acknowledgement to the application gateway server computer confirming deletion of the portion of content from the managed container.

16. The system of claim 12, wherein the managed container comprises a program downloaded to the client device from a source on the Internet.

17. The system of claim 12, wherein the application gateway server computer is operable to initiate the network connection with the client device.

18. The system of claim 12, wherein the application gateway server computer is operable to track information on one or more devices associated with a user.

19. The system of claim 12, wherein the client device is one of a plurality of client devices associated with a user, wherein the remote wipe message is sent from the application gateway server computer to a managed container running on each of the plurality of client devices associated with the user, and wherein, responsive to the remote wipe message from the application gateway server computer, the managed container running on each of the plurality of client devices associated with the user deleting the content or a portion thereof from its managed cache.

20. The system of claim 12, wherein the application gateway server computer maintains a list of approved client devices and wherein the application gateway server computer sends the remote wipe message to the managed container if the client device is absent from the list of approved client devices.

21. The system of claim 12, wherein the content includes multiple versions of a document.

22. The system of claim 12, wherein the content includes a document and wherein the application gateway server sends the remote wipe message to the managed container in response to a record management operation relevant to the document and received from a backend system.