Method and apparatus for data protection for mobile devices

• US 7,865,172 B2
• Filed: 06/20/2006
• Issued: 01/04/2011
• Est. Priority Date: 06/20/2006
• Status: Active Grant

• Current Assignee: Avaya Incorporated
• Original Assignee: Avaya Incorporated
• Inventors: Lang, Andrew W., Hepworth, Neil, Gentle, Christopher Reon, Chan, Kevin, Blair, Colin
• Primary Examiner(s): Corsaro, Nick
• Assistant Examiner(s): Choo, Munsoon
• Application Number:
  US11/471,192
• Publication Number:
  US 20070294529A1
• Time in Patent Office: 1,659 Days
• Field of Search: 455410-411, 455418-419, 455/412.1, 455/26.1, 380/30, 380/247, 380/255, 380/270, 726/26
• US Class Current: 455/411
• CPC Class Codes: G06F 11/1458 Management of the backup or restore process
• CPC Class Codes: G06F 21/6218 to a system of files or objects, e.g. local or distributed file system or database
• CPC Class Codes: G06F 21/88 Detecting or preventing theft or loss
• CPC Class Codes: H04L 2209/80 Wireless
• CPC Class Codes: H04L 9/0894 Escrow, recovery or storing of secret information, e.g. secret key escrow or cryptographic key storage

Abstract

A method and apparatus protect data stored in a device by storing data from the device on a backup system upon the device being connected to the backup system; detecting that the device has been lost or stolen; encrypting a set of data stored on the device that has not been stored on the backup system using an encryption key based on another set of data stored on the device and also stored on the backup system; and deleting the other set of data and encryption key from the device.

Claims

1. A method for protecting data stored in a device, comprising:

backing up data by the device to a backup system upon the device being connected to the backup system;

detecting by the device that the device has been lost or stolen;

generating by the device an encryption key from the backed up data upon the detection that the device has been lost or stolen;

encrypting by the device non-backed up data stored on the device that has not been stored on the backup system using the generated encryption key; and

deleting by the device the backed up data and the encryption key from the device with the encrypted non-backed up data remaining stored on the device for later recovery by the backup system.

2. The method of claim 1 further comprises re-connecting the device to the backup system;

re-generating the encryption key by the backup system from the backed up data stored on the backup system; and

recovering by the backup system the encrypted non-backed up data stored on the device by decrypting using the re-generated encryption key.

3. The method of claim 1 wherein the detecting comprises determining a gait of an individual carrying the device;

and

indicating that the device has been lost or stolen upon the determined gait being different from an user of the device.

4. The method of claim 3 wherein the indicating comprises requesting a password or personal identification number upon the gait not being that of the user of the device;

and

giving no indication of the device being lost or stolen if the password or personal identification number is correct.

5. The method of claim 1 wherein the detecting comprises determining that the device has not contacted a central system.

6. The method of claim 5 wherein the deleting further comprises allowing the central system to determine whether to delete the data.

7. The method of claim 1 wherein the detecting comprises determining that an incorrect password or personal identification number was incorrectly entered in response to a prompt to enter a password or personal identification number.

8. The method of claim 1 wherein the detecting comprises determining that the device has not periodically connected to a specified device within a predefined period of time.

9. The method of claim 1 wherein the detecting comprises determining that the device has not periodically connected to a specified network within a predefined period of time.

10. A non-transitory processor-readable medium for protecting data stored in a device, comprising processor-executable instructions configured for:

backing up data by processor-executable instructions on the device to a backup system upon the device being connected to the backup system;

detecting by processor-executable instructions on the device that the device has been lost or stolen;

generating by processor-executable instructions on the device an encryption key from the backed up data upon the detection that the device has been lost or stolen;

encrypting by processor-executable instructions on the device a non-backed up data stored on the device that has not been stored on the backup system using the generated encryption key; and

deleting by processor-executable instructions on the device the backed up data and the encryption key from the device with the encrypted non-backed up data remaining stored on the device for later recovery by the backup system.

11. The processor-readable medium of claim 10 further comprises processor-executable instructions for re-connecting the device to the backup system;

processor-executable instructions stored on the backup system for re-generating the encryption key from the backed up data stored on the backup system; and

processor-executable instructions stored on the backup system for recovering the encrypted non-backed up data stored on the device by decrypting using the re-generated encryption key.

12. The processor-readable medium of claim 10 wherein the processor-executable instructions for detecting comprise processor-executable instructions for determining a gait of an individual carrying the device;

and

processor-executable instructions for indicating that the device has been lost or stolen upon the determined gait being different from an user of the device.

13. The processor-readable medium of claim 12 wherein the processor-executable instructions for indicating comprise processor-executable instructions for requesting a password or personal identification number upon the gait not being that of the user of the device;

and

processor-executable instructions for giving no indication of the device being lost or stolen if the password or personal identification number is correct.

14. The processor-readable medium of claim 10 wherein the processor-executable instructions for detecting comprise processor-executable instructions for determining that the device has not contacted a central system.

15. The processor-readable medium of claim 14 wherein the processor-executable instructions for deleting further comprise processor-executable instructions for allowing the central system to determine whether to delete the data.

16. The processor-readable medium of claim 10 wherein the processor-executable instructions for detecting comprise processor-executable instructions for determining that an incorrect password or personal identification number was incorrectly entered in response to a prompt to enter a password or personal identification number.

17. The processor-readable medium of claim 10 wherein the processor-executable instructions for detecting comprise processor-executable instructions for determining that the device has not periodically connected to a specified device within a predefined period of time.

18. The processor-readable medium of claim 10 wherein the processor-executable instructions for detecting comprise processor-executable instructions for determining that the device has not periodically connected to a specified network within a predefined period of time.