System for providing mobile data security

• US 8,418,258 B2
• Filed: 09/23/2010
• Issued: 04/09/2013
• Est. Priority Date: 08/09/2006
• Status: Active Grant

• Current Assignee: Antenna Vaultus, Inc. (Pegasystems Incorporated)
• Original Assignee: Antenna Vaultus, Inc. (Pegasystems Incorporated)
• Inventors: Goyal, Arvind, George, Joseph, Mak, Howard, Arnold, John E.
• Primary Examiner(s): Zand, Kambiz
• Assistant Examiner(s): WYSZYNSKI, AUBREY H
• Application Number:
  US12/888,991
• Publication Number:
  US 20110107437A1
• Time in Patent Office: 929 Days
• Field of Search: 726/3, 726/30, 709/217
• US Class Current: 726/30
• CPC Class Codes: G06F 21/606 by securing the transmission between two devices or processes
• CPC Class Codes: G06F 21/6209 to a single file or object, e.g. in a secure envelope, encrypted and accessed using a key, or with access control rules appended to the object itself
• CPC Class Codes: G06F 2221/2137 Time limited access, e.g. to a computer or data

Abstract

A system transfers applications and datasets (files) from a server to a client device and assigns to each file a lease key that will expire at a specified time. A file cannot be accessed unless its lease key is validated. Upon expiration of a lease key, the client device will connect to the server to determine if the lease key may be renewed. If the lease key may be renewed, a new lease key is created and access to the associated application or dataset is restored. If the lease key may not be renewed, the file may be deleted or rendered inaccessible. If rendered inaccessible, the file may be restored in the future without having to re-transmit it from the server to the client device. The server may also revoke a lease key before it expires.

Claims

1. A method for providing mobile data security, comprising:

transmitting to a client device a connection processor tool for allowing said client device to connect to a server;

establishing a connection with the client device and authenticating the connection;

transmitting to said client device an enumeration of one or more data files or an enumeration of one or more applications;

transmitting to said client device a lease key management tool to allow said client device to create a lease key using client side information and the lease key is stored in the client device'"'"'s enumeration of configuration data for an application and/or a dataset stored on the client device to control access to the application and/or dataset

if said enumeration of one or more applications lists an application new to said client device, receiving a request for retrieval of said new application

wherein said request for a new application or data file comprises a request for partial enumerations of applications or data files;

if said enumeration of one or more data files lists a data file new to said client device, receiving a request for retrieval of said new data file, and

transmitting to said client device the new application or the new data file in a format corresponding to said client device.

2. The method of claim 1, wherein the step of transmitting the new application to said client device includes transmitting a partial enumeration of one or more applications including a specific application identified in said request for a new application.

3. The method of claim 1, wherein the step of transmitting the new data file to said client device includes transmitting a partial enumeration of one or more data files including a specific data file identified in said request for a new data file.

4. The method of claim 1, where the created lease key has an expiration time for each data file or application residing in the client device;

and further comprising the step of;

transmitting to said client device an instruction for maintaining the lease key in the client device.

5. The method of claim 4, further comprising the step of:

upon expiration of said lease key, transmitting to said client device a re-authorization to access a file or application associated with said lease key.

6. The method of claim 1, further comprising the step of transmitting to said client device an instruction for storing said retrieved application or data file in a specific location in said client device.

7. A method for providing mobile data security, comprising:

receiving a connection processor tool for allowing a client device to connect to a server;

authenticating a connection from said client device to said server;

receiving by said client device a lease key management tool to allow said client device to create a lease key using client side information and the lease key is stored in the client device'"'"'s enumeration of configuration data for an application and/or a dataset stored on the client device to control access to the application and/or data set;

receiving an enumeration of one or more data files or an enumeration of one or more applications;

processing said enumeration of data files or enumeration of applications;

if said enumeration of applications lists an application new to said client device, transmitting a request for retrieval of said new application;

if said enumeration of data files lists a data file new to said client device, transmitting a request for retrieval of said new data file; and

receiving said new application or data file in a format corresponding to said client device.

8. The method of claim 7, wherein receiving said new application includes receiving partial enumeration of one or more applications including a specific application identified in said request for retrieval of said new application.

9. The method of claim 7, wherein receiving said new data file includes receiving partial enumeration of said data files including a specific data file identified in said request for retrieval of said new data file.

10. The method of claim 7, wherein said requests for retrieval comprise one or more requests for partial enumerations of applications or data files.

11. The method of claim 7, where the created lease key has an expiration time for each data file or application residing in the client device;

and further comprising the step of;

receiving an instruction for maintaining each said lease key in the client device.

12. The method of claim 11, further comprising:

upon expiration of a first lease key, requesting said server for re-authorization to access a file or application associated with said first lease key.

13. The method of claim 7, further comprising the step of receiving an instruction for storing said retrieved application or data file in a specific location in said client device.

14. The method of claim 7, wherein the step of processing enumeration of data files or enumeration of applications comprises:

if a same version of a data file or a same version of an application listed in the enumeration already exists in said client device, creating a lease key for the existing application or data file.

15. The method of 7, wherein the step of processing said enumeration of data files or enumeration of applications comprises:

if an earlier version of a data file or an earlier version of an application listed in the enumeration exists in said client device, transmitting a request for an update of a data file or an application; and

if an update of an application or data file is successfully received, creating a new lease key for the application or data file updated.

16. The method of claim 15, further comprising:

upon expiration of the new lease key, requesting said server for re-authorization to access a file or application associated with said lease key.