System and method for securely managing data stored on mobile devices, such as enterprise mobility data

• US 8,494,486 B2
• Filed: 02/24/2012
• Issued: 07/23/2013
• Est. Priority Date: 02/14/2007
• Status: Active Grant

• Current Assignee: Microsoft Technology Licensing LLC (Microsoft Corporation)
• Original Assignee: Nuance Communications, Inc. (Microsoft Corporation)
• Inventors: Roundtree, Brian
• Primary Examiner(s): Nguyen, Lee
• Application Number:
  US13/404,763
• Publication Number:
  US 20120149338A1
• Time in Patent Office: 515 Days
• Field of Search: 455/410, 455/412.1, 455/558
• US Class Current: 455/410
• CPC Class Codes: G06F 21/62 Protecting access to data via a platform, e.g. using keys or access control rules
• CPC Class Codes: G06F 21/78 to assure secure storage of data address-based protection against unauthorised use of memory G06F12/14; record carriers for use with machines and with at least a part designed to carry digital markings G06K19/00
• CPC Class Codes: G06F 2221/2105 Dual mode as a secondary aspect
• CPC Class Codes: G06F 2221/2111 Location-sensitive, e.g. geographical location, GPS
• CPC Class Codes: H04L 63/105 Multiple levels of security
• CPC Class Codes: H04W 12/08 Access security
• CPC Class Codes: H04W 12/37 Managing security policies for mobile devices or for controlling mobile applications
• CPC Class Codes: H04W 12/67 Risk-dependent, e.g. selecting a security level depending on risk profiles
• CPC Class Codes: H04W 88/02 Terminal devices

Abstract

A system and method for managing data stored on mobile devices is described. In some cases, the system stores data, such as data under enterprise mobility management, within a secured memory location of a SIM card. In some cases, the system may request validation credentials before providing access to data stored in secure locations. In some cases, the system may review an access policy and request validation based on instructions from the access policy.

Claims

1. A method of providing security for email messages stored within a mobile device, the method comprising:

receiving an indication that a removable storage device has been inserted into the mobile device,

wherein the removable storage device includes a secure memory component and an unsecured memory component;

loading from within the removable storage device a management application into the local memory of the mobile device; and

executing the management application from the local memory of the mobile device,

wherein the executed application causes email messages stored within the local memory to be mapped to the secure memory component of the removable storage device.

2. The method of claim 1, wherein the executed application causes email messages received by the mobile device to be mapped to the secure memory component of the removable storage device.

3. The method of claim 1, wherein the executed application causes a subset of the email messages stored within the local memory associated with enterprise mobility management to be mapped to the secure memory component of the removable storage device.

4. The method of claim 1, further comprising:

receiving a request from a user to access an email message mapped to the secure memory component of the removable storage device;

determining whether the request was received from an authorized user; and

when the user is authorized, providing access to the requested email message, or

when the user is not authorized, blocking access to the requested email message.

5. A computer-readable storage medium storing instructions that when executed by a mobile device implement security for email messages stored within a mobile device, the method comprising:

receiving an indication that a removable storage device has been inserted into the mobile device,

wherein the removable storage device includes a secure memory component and an unsecured memory component;

loading from within the removable storage device a management application into the local memory of the mobile device; and

executing the management application from the local memory of the mobile device,

wherein the executed application causes email messages stored within the local memory to be mapped to the secure memory component of the removable storage device.

6. The computer-readable storage medium of claim 5, wherein the executed application causes email messages received by the mobile device to be mapped to the secure memory component of the removable storage device.

7. The computer-readable storage medium of claim 5, wherein the executed application causes a subset of the email messages stored within the local memory associated with enterprise mobility management to be mapped to the secure memory component of the removable storage device.

8. The computer-readable storage medium of claim 5, further comprising:

receiving a request from a user to access an email message mapped to the secure memory component of the removable storage device;

determining whether the request was received from an authorized user; and

when the user is authorized, providing access to the requested email message, or

when the user is not authorized, blocking access to the requested email message.

9. A system of providing security for email messages stored within a mobile device, the method comprising:

means for receiving an indication that a removable storage device has been inserted into the mobile device,

wherein the removable storage device includes a secure memory component and an unsecured memory component;

means for loading from within the removable storage device a management application into the local memory of the mobile device; and

means for executing the management application from the local memory of the mobile device,

wherein the executed application causes email messages stored within the local memory to be mapped to the secure memory component of the removable storage device.

10. The system of claim 9, wherein the executed application causes email messages received by the mobile device to be mapped to the secure memory component of the removable storage device.

11. The system of claim 9, wherein the executed application causes a subset of the email messages stored within the local memory associated with enterprise mobility management to be mapped to the secure memory component of the removable storage device.

12. The system of claim 9, further comprising:

means for receiving a request from a user to access an email message mapped to the secure memory component of the removable storage device;

means for determining whether the request was received from an authorized user;

means for providing access to the requested email message when the user is authorized; and

means for blocking access to the requested email message when the user is not authorized.