Controlling enterprise data on mobile device via the use of a tag index

• US 9,665,576 B2
• Filed: 05/14/2012
• Issued: 05/30/2017
• Est. Priority Date: 05/14/2012
• Status: Active Grant

• Current Assignee: Taiwan Semiconductor Manufacturing Company Limited
• Original Assignee: International Business Machines Corporation
• Inventors: Muppidi, Sridhar R., Kapoor, Shalini, Nandakumar, Vikrant, Kodeswaran, Palanivel A., Nagaratnam, Nataraj
• Primary Examiner(s): Spieler, William
• Application Number:
  US13/470,662
• Publication Number:
  US 20130304702A1
• Time in Patent Office: 1,842 Days
• Field of Search: 707741, 707740
• CPC Class Codes: G06F 16/11 File system administration, e.g. details of archiving or snapshots file system backup G06F11/14
• CPC Class Codes: H04W 12/08 Access security
• CPC Class Codes: H04W 12/37 Managing security policies for mobile devices or for controlling mobile applications

Abstract

A method, system and computer program product for controlling enterprise data on mobile devices. Data on a mobile device is tagged as being associated with either enterprise data or with personal data. Upon identifying the storage location of the tagged data and the identifier of the application that generated the tagged data, the tag, the storage location of the tagged data and the identifier of the application are stored in an index. A mobile agent residing on the mobile device may be directed by a mobile device management server of the enterprise to perform various actions (e.g., deleting, encrypting, backing-up) on the enterprise data using the index. In this manner, the enterprise has the ability to control their applications and data that resides on employees'"'"' mobile devices to ensure that such data is not lost or used in a manner that is contrary to the wishes of the employer.

Claims

1. A method for controlling enterprise data on mobile devices, the method comprising:

tagging data on a mobile device as being associated with one of enterprise data and personal data with a tag;

identifying a storage location of said tagged data;

obtaining an identifier of an application that generated said tagged data;

storing, by a processor, said tag indicating one of said enterprise data and said personal data, said storage location of said tagged data and said identifier of said application in a single index; and

implementing an arbitration policy to select an appropriate tag associated with said tagged data on said mobile device in response to different tags being associated with said tagged data on said mobile device.

2. The method as recited in claim 1 further comprising:

receiving a system call from said application;

obtaining a user identifier of said application; and

obtaining said tag corresponding to said user identifier of said application.

3. The method as recited in claim 1 further comprising:

receiving said identifier of said application, said tag and said storage location of said tagged data from said application.

4. The method as recited in claim 1 further comprising:

prompting a user to select a tag for application data; and

receiving said selected tag from said user.

5. The method as recited in claim 1 further comprising:

receiving a request to delete all or a selected portion of data tagged as said enterprise data;

identifying one or more storage locations of said tagged data to be deleted using said index; and

deleting said tagged data requested to be deleted.

6. The method as recited in claim 1 further comprising:

receiving a request to back-up all or a selected portion of data tagged as said enterprise data;

identifying one or more storage locations of said tagged data to be backed-up using said index; and

backing-up said tagged data requested to be backed-up.

7. The method as recited in claim 1 further comprising:

receiving a request to encrypt all or a selected portion of data tagged as said enterprise data;

identifying one or more storage locations of said tagged data to be encrypted using said index; and

encrypting said tagged data requested to be encrypted.

8. The method as recited in claim 1 further comprising:

receiving a request to apply access control on all or a selected portion of data tagged as said enterprise data;

identifying one or more storage locations of said tagged data to have applied access control using said index; and

applying access control on said tagged data requested to have applied access control.

9. A method for controlling enterprise data on mobile devices, the method comprising:

tagging data on a mobile device as being associated with one of enterprise data and personal data with a tag;

identifying a storage location of said tagged data;

obtaining an identifier of an application that generated said tagged data;

storing, by a processor, said tag indicating one of said enterprise data and said personal data, said storage location of said tagged data and said identifier of said application in a single index; and

implementing an arbitration policy to select an appropriate tagging mechanism in response to different tagging mechanisms tagging said data on said mobile device.