System and method for handling data transfers

• US 7,734,284 B2
• Filed: 04/29/2005
• Issued: 06/08/2010
• Est. Priority Date: 04/30/2004
• Status: Active Grant

• Current Assignee: Blackberry Limited
• Original Assignee: Blackberry Limited
• Inventors: Adams, Neil P., Kirkup, Michael G., Little, Herbert A.
• Primary Examiner(s): MEHRPOUR, NAGHMEH
• Application Number:
  US11/118,791
• Publication Number:
  US 20050255838A1
• Time in Patent Office: 1,866 Days
• Field of Search: 455/418, 455/412.2, 455/404.1, 455/419, 455/424, 370/328, 370/466, 713/166, 713/172
• US Class Current: 455/418
• CPC Class Codes: H04L 51/214 using selective forwarding
• CPC Class Codes: H04L 51/58 Message adaptation for wireless communication
• CPC Class Codes: H04L 63/04 for providing a confidential data exchange among entities communicating through data packet networks
• CPC Class Codes: H04L 63/105 Multiple levels of security
• CPC Class Codes: H04M 2203/609 Secret communication
• CPC Class Codes: H04M 3/205 Eavesdropping prevention - indication of insecurity of line or network
• CPC Class Codes: H04M 7/0078 Security; Fraud detection; Fraud prevention
• CPC Class Codes: H04W 12/02 Protecting privacy or anonymity, e.g. protecting personally identifiable information [PII]
• CPC Class Codes: H04W 12/033 of the user plane, e.g. user's traffic
• CPC Class Codes: H04W 12/08 Access security
• CPC Class Codes: H04W 12/30 Security of mobile devices; Security of mobile applications
• CPC Class Codes: H04W 12/37 Managing security policies for mobile devices or for controlling mobile applications
• CPC Class Codes: H04W 12/63 Location-dependent; Proximity-dependent

Abstract

Systems and methods for managing data transfers between a secure location and a less secure location. A data transfer checker operating on a mobile device determines whether an attempted data transfer between two locations is permitted. If it is not permitted, then the data transfer is prevented and the user may be notified of the data transfer prevention.

Claims

1. A method of handling data transfers on a device, comprising:

receiving a data transfer request to transfer data from a first location to a second location;

wherein the first location is more secure than the second location;

retrieving data transfer settings from a data store responsive to receiving the data transfer request;

wherein the data transfer settings indicate whether a data transfer is to occur based upon a security-related aspect associated with the data transfer;

determining whether to transfer the data from the first location to the second location based upon the data transfer settings;

wherein the data is transferred or not transferred responsive to the determining step;

wherein the first location is a first application, and the second location is a second application.

2. The method of claim 1, wherein the data transfer security-related aspect includes an aspect selected from the group comprising:

level of security associated with destination of the data transfer;

type of communication operation to be performed between the first location and the second location; and

combinations thereof;

wherein the type of data transfer communication operation includes an operation selected from the group comprising;

data forwarding between service books;

opening an internal and an external connection;

an Inter-Process Communication (IPC) between applications;

a cut-copy-paste type operation between applications; and

combinations thereof;

wherein a notification is provided to a user interface of the device to indicate that the data transfer request was not completed because of the determining step.

3. The method of claim 1, further comprising:

receiving the data transfer settings from an administrator; and

storing the data transfer settings in a data store, responsive to receiving the data transfer settings from the administrator.

4. The method of claim 1, wherein the first location application is part of a first service, and the second location application is part of a second service.

5. The method of claim 4, wherein the first and second services are selected from a group of services comprising:

a personal electronic mail service, a professional electronic mail service, or an instant messaging service.

6. The method of claim 1, wherein the determining step that is performed based upon the data transfer settings prevents a malicious application from siphoning data contained inside a corporation'"'"'s or government'"'"'s firewall to outside the firewall.

7. The method of claim 1, wherein the first location and second location correspond to companies or governments that have different types of networks with different levels of security.

8. The method of claim 1, wherein the device is a mobile wireless communications device.

9. The method of claim 1, wherein the data transfer settings are configured to prevent data transfers using Inter-Process Communications (IPC).

10. The method of claim 9, wherein a company or government that owns the device sets the data transfer settings to choose which applications are permitted to use IPC for data transfers.

11. The method of claim 1, wherein the data transfer settings indicate what data transfers are permitted and which data transfers are not permitted.

12. The method of claim 1, further comprising:

receiving updated data transfer settings from an information technology (IT) administrator; and

replacing the data transfer settings in the data store located on the device with the updated data transfer settings.

13. The method of claim 12, wherein the IT administrator of a company or government that owns the device customizes the data transfer settings in accordance with the company'"'"'s or government'"'"'s policy requirements.

14. The method of claim 13, wherein the IT administrator provides the same settings to multiple devices owned by the company or the government, thereby ensuring that company or government mobile devices adhere to a consistent IT policy.

15. The method of claim 12, wherein the IT administrator can specify at least data transfer settings selected from one or more of the following policies:

whether data forwarding between service books should be allowed;

whether cut-copy-paste operations between applications should be allowed;

whether applications should be prevented from opening an internal and an external connection;

whether Inter-Process Communication (IPC) should be allowed between applications; and

combinations thereof.

16. Computer software stored on one or more computer readable media, the computer software comprising program code for carrying out a method according to claim 1.

19. The method of claim 1 wherein the first application and the second application reside on the same device.

17. A data transfer apparatus for transferring data on a device from a first location to a second location, the apparatus comprising:

a data store that stores data transfer settings;

wherein the data transfer settings indicate whether a data transfer is to occur based upon a security-related aspect associated with the data transfer;

a data transfer checker that is configured to retrieve data transfer settings from the data store responsive to the device receiving a request to transfer data from the first location to the second location;

wherein the data transfer checker is configured to prevent the request from being performed responsive to the data transfer settings;

wherein the first location is a first application, and the second location is a second application.

20. The apparatus of claim 17 wherein the first application and the second application reside on the same device.

18. A data transfer system for transferring data on a wireless mobile communications device from a first location to a second location, the system comprising:

means for receiving a data transfer request to transfer data from a first location to a second location;

wherein the first location is more secure than the second location;

means for retrieving data transfer settings from a data store responsive to receiving the data transfer request;

wherein the data store is located on the wireless mobile communications device;

wherein the data transfer settings indicate whether a data transfer is to occur based upon a security-related aspect associated with the data transfer;

wherein the data transfer is a transfer selected from the group comprising;

data forwarding between service books;

a cut-copy-paste operation between applications;

applications opening an internal and an external connection;

IPC (interprocess communication) between applications;

means for determining whether to transfer the data from the first location to the second location based upon the data transfer settings;

wherein the data is transferred or not transferred responsive to the determining of whether to transfer the data from the first location to the second location based upon the data transfer settings;

wherein the first location is a first application, and the second location is a second application.

21. The system of claim 18 wherein the first application and the second application reside on the same device.