System and method of data security in synchronizing data with a wireless device

• US 9,158,829 B2
• Filed: 03/20/2013
• Issued: 10/13/2015
• Est. Priority Date: 10/28/2004
• Status: Active Grant

• Current Assignee: Malikie Innovations Limited (Key Patent Innovations Limited)
• Original Assignee: Good Technology Incorporated (Blackberry Limited)
• Inventors: Muratov, Alexander
• Primary Examiner(s): MOSER, BRUCE M
• Application Number:
  US13/847,621
• Publication Number:
  US 20130232112A1
• Time in Patent Office: 937 Days
• Field of Search: 707/610, 707/634
• US Class Current: 1/1
• CPC Class Codes: G06F 16/27 Replication, distribution or synchronisation of data between databases or within a distributed database system; Distributed database system architectures therefor
• CPC Class Codes: G06F 16/273 Asynchronous replication or reconciliation
• CPC Class Codes: G06F 21/60 Protecting data
• CPC Class Codes: G06F 21/6218 to a system of files or objects, e.g. local or distributed file system or database
• CPC Class Codes: G06F 2221/2113 Multi-level security, e.g. mandatory access control
• CPC Class Codes: H04L 9/00 Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols

Abstract

A system is disclosed. The system includes a server, a client application, and a first database. The first database is associated with the client application. The system further includes a second database to store data in an encrypted format, and a replicator to synchronize the data stored in the first and second databases. The system also includes a synchronizer to synchronize the data stored in the second database and the server based on a current security level.

Claims

1. A wireless device, comprising:

a client application;

a first database configured to store data for access by the client application;

a second database configured to store data in an encrypted format;

a replicator for synchronizing the data stored in the first database with encrypted data stored in the second database; and

a synchronizer for synchronizing the encrypted data stored in the second database with data stored in a server,

the wireless device being configured to operate selectively in a plurality of security levels,

wherein the wireless device is configured such that, when operating in a first security level of the plurality of security levels, the synchronizer synchronizes the encrypted data stored in the second database with the data stored in the server, and access by the client application to data stored in the first database is restricted.

2. The wireless device of claim 1, wherein, when the wireless device is operating in the first security level, the wireless device is configured to restrict synchronization, by the replicator, of the data stored in the first database with the encrypted data stored in the second database.

3. The wireless device of claim 1, wherein, when the wireless device is operating in the first security level, the wireless device is configured to delete the data stored in the first database.

4. The wireless device of claim 1, wherein the plurality of security levels includes a second security level, different to the first security level, and the wireless device is configured such that, when operating in the second security level, the synchronizer synchronizes the encrypted data stored in the second database with the data stored in the server, and the replicator synchronizes data stored in the first database with the encrypted data stored in the second database.

5. The wireless device of claim 1, wherein the plurality of security levels includes a third security level, different to the first security level and the second security level, wherein the first database, second database, synchronizer and replicator are disabled when the wireless device is operating in the third security level.

6. The wireless device of claim 1, wherein the wireless device is configured to change a said security level based on one or more of the following:

failed attempts to enter a password for the device exceeds a predetermined amount, occurrence of an attempted remote command via short message service (“

SMS”

), and detection of a network intrusion.

7. The wireless device of claim 1, wherein the synchronized device data comprises personal information manager data.

8. A system comprising:

a server configured to store data; and

a wireless device communicatively coupled to the server, the wireless device, including;

a client application;

a first database configured to store data for access by the client application;

a second database configured to store data in an encrypted format;

a replicator for synchronizing the data stored in the first database with encrypted data stored in the second database; and

a synchronizer for synchronizing the encrypted data stored in the second database with the data stored in the server,

the wireless device being configured to operate selectively in a plurality of security levels,

wherein the wireless device is configured such that, when operating in a first security level of the plurality of security levels, the synchronizer synchronizes the encrypted data stored in the second database with the data stored in the server, and access by the client application to data stored in the first database is restricted.

9. The system of claim 8, wherein the device is coupled to the server via one of:

a wired network, and a wireless network.

10. A method of controlling access to data held on a wireless device, the wireless device comprising a first database and a second, different, database, the first database being configured to store data for access by a client application on the wireless device the second database being configured to store data in an encrypted format, the wireless device being configured to synchronize data stored in the first database with encrypted data stored in the second database and to synchronize encrypted data stored in the second database with data stored on a server remote from the wireless device, and the wireless device being configured to operate in a plurality of security modes, including a first security mode, the method comprising:

determining whether the wireless device is operating in said first security mode; and

responsive to a determination that the wireless device is operating in the first security mode, configuring the wireless device so as to restrict access by the client device to data stored in the first database, and to synchronize the encrypted data in the second database with data store in the server.

11. The method of claim 10 comprising:

responsive to a determination that the device is operating in the first security mode, configuring the wireless device to restrict the synchronization of the data stored in the first database with the encrypted data.

12. The method of claim 10 comprising:

determining whether the wireless device is operating in a second security mode, different to the first security mode; and

responsive to a determination that the wireless device is operating in the second security mode, configuring the wireless device to synchronize the data stored in the first database with the encrypted data stored in the second database, and to synchronize the encrypted data stored in the second database with the server.

13. The method of claim 12, comprising, responsive to the determination that the wireless device is operating in the second security mode, providing the client application access to the data stored in first database.

14. The method of claim 10, in which the determination that the wireless device is operating in the first security mode is based on one of the following:

failed attempts to enter a password for the device exceeds a predetermined number, occurrence of an attempted remote command via short message service (“

SMS”

), and detection of a network intrusion.

15. The method of claim 10, comprising erasing cipher keys associated with the encrypted data in the second database in response to determining that the wireless device is operating in the first security mode.

16. The method of claim 10, comprising deleting the data stored in the first database in response to determining that the wireless device is operating in the first security mode.

17. A non-transitory computer readable storage medium storing computer readable instructions thereon for execution on a wireless device to implement a method of controlling access to data stored thereon, the wireless device comprising a first database and a second, different, database, the first database being configured to store data for access by a client application on the wireless device the second database being configured to store data in an encrypted format, the wireless device being configured to synchronize data stored in the first database with encrypted data stored in the second database and to synchronize encrypted data stored in the second database with data stored on a server remote from the wireless device, and the wireless device being configured to operate in a plurality of security modes, including a first security mode, the computer-readable instructions, when executed on a processor of the wireless device, causing the processor to perform the method comprising:

determining whether the wireless device is operating in said first security mode; and

responsive to a determination that the wireless device is operating in the first security mode, configuring the wireless device so as to restrict access by the client device to data stored in the first database, and to synchronize the encrypted data in the second database with data store in the server.

18. The non-transitory computer readable storage medium of claim 17, wherein the computer readable instructions, when executed on a processor of the wireless device, cause the processor, responsive to said determination, to restrict synchronization of the data stored in the first database with the encrypted data stored in the second database.