System and method for preventing access to data on a compromised remote device

• US 9,672,371 B2
• Filed: 07/02/2015
• Issued: 06/06/2017
• Est. Priority Date: 08/09/2002
• Status: Active Grant

• Current Assignee: Blackberry Limited
• Original Assignee: Good Technology Holdings Limited (Blackberry Limited)
• Inventors: Ng, Mason, Mendez, Daniel J.
• Primary Examiner(s): AVERY, JEREMIAH L
• Application Number:
  US14/791,078
• Publication Number:
  US 20150310222A1
• Time in Patent Office: 705 Days
• Field of Search: None
• CPC Class Codes: G06F 21/604 Tools and structures for managing or administering access control systems
• CPC Class Codes: G06F 21/62 Protecting access to data via a platform, e.g. using keys or access control rules
• CPC Class Codes: G06F 21/6209 to a single file or object, e.g. in a secure envelope, encrypted and accessed using a key, or with access control rules appended to the object itself
• CPC Class Codes: G06F 21/6218 to a system of files or objects, e.g. local or distributed file system or database
• CPC Class Codes: G06F 2221/2143 Clearing memory, e.g. to prevent the data from being stolen
• CPC Class Codes: H04L 63/083 using passwords cryptographic mechanisms or cryptographic arrangements for entity authentication using a predetermined code H04L9/3226
• CPC Class Codes: H04L 63/10 for controlling access to devices or network resources
• CPC Class Codes: H04L 63/14 for detecting or protecting against malicious traffic
• CPC Class Codes: H04L 63/1416 Event detection, e.g. attack signature detection
• CPC Class Codes: H04L 63/1425 Traffic logging, e.g. anomaly detection
• CPC Class Codes: H04L 63/1441 Countermeasures against malicious traffic countermeasures against attacks on cryptographic mechanisms H04L9/002
• CPC Class Codes: H04L 67/1095 Replication or mirroring of data, e.g. scheduling or transport for data synchronisation between network nodes
• CPC Class Codes: H04W 12/06 Authentication
• CPC Class Codes: H04W 12/122 Counter-measures against attacks; Protection against rogue devices
• CPC Class Codes: H04W 12/126 Anti-theft arrangements, e.g. protection against subscriber identity module [SIM] cloning
• CPC Class Codes: H04W 12/128 Anti-malware arrangements, e.g. protection against SMS fraud or mobile malware

Abstract

This invention discloses a system and method for selective erasure, encryption and or copying of data on a remote device if the remote device has been compromised or the level of authorization of a roaming user in charge of the remote device has been modified.

Claims

1. A method, comprising:

receiving, at a synchronization server and from a remote device, an indication that the remote device is compromised, wherein the server controls access to data held on the remote device;

determining, by the synchronization server, a trigger of an auto-destruction of data available on the remote device based on the indication;

determining, by the synchronization server, an extent of the auto-destruction based on the trigger according to a set procedure;

selecting, by the synchronization server, at least one subset of data available on the remote device based on the trigger and the set procedure; and

transmitting, from the synchronization server to the remote device, a command to execute the determined extent of the auto-destruction of the at least one subset of data available on the remote device.

2. The method of claim 1, wherein determining a trigger of an auto-destruction based on the indication comprises determining by the synchronization server:

whether the remote device is lost or stolen;

whether the remote device is in possession of a terminated employee;

whether the remote device is loaned by one employee to another;

whether a password has not been entered at a specified interval;

whether an incorrect password has been entered;

or

whether a certain communication has not been received at a specified interval.

3. The method of claim 1, wherein determining an extent of the auto-destruction based on the trigger according to a set procedure comprises determining by the synchronization server, based on the trigger and the set procedure:

whether to delete all or a part of the available data on the remote device;

whether to limit access to all or a part of the available data on the remote device;

whether to sever a connection to the remote device;

whether to copy all or a part of the available data on the remote device;

whether to copy encrypt all or a part of the available data on the remote device;

or

whether to reformat all or a part of the available data on the remote device.

4. The method of claim 1, wherein the set procedure is selected by a user in charge of the data interactively based on a real time evaluation of a situation or by a preset mechanism that is triggered according to certain preset criteria.

5. The method of claim 1, further comprising the synchronization server checking a sensitivity level of data stored on the remote device;

and

wherein selecting at least one subset of data from the remote device comprises the synchronization server selecting at least one subset of data from the remote device based on the sensitivity level of data.

6. The method of claim 1, wherein the at least one subset of data comprises personal data.

7. The method of claim 1, wherein the at least one subset of data comprises applications.

8. A non-transitory computer-readable storage medium having computer-readable instructions stored thereon, the computer-readable instructions when executed by a synchronization server device cause the synchronization server device to perform a method of controlling access to data available on a remote device, the method comprising:

receiving, at the synchronization server device and from the remote device, an indication that the remote device is compromised;

determining, by the synchronization server device, a trigger of an auto-destruction of the data available on the remote device based on the indication;

determining, by the synchronization server device, an extent of the auto-destruction based on the trigger according to a set procedure;

selecting, by the synchronization server device at least one subset of data available on the remote device based on the trigger and the set procedure; and

transmitting, to the remote device, a command to execute the determined extent of the auto-destruction of the at least one subset of data available on the remote device.

9. The medium of claim 8, wherein determining a trigger of an auto-destruction based on the indication comprises determining by the synchronization server device:

whether the remote device is lost or stolen;

whether the remote device is in possession of a terminated employee;

whether the remote device is loaned by one employee to another;

whether a password has not been entered at a specified interval;

whether an incorrect password has been entered;

or

whether a certain communication has not been received at a specified interval.

10. The medium of claim 8, wherein determining an extent of the auto-destruction based on the trigger according to a set procedure comprises determining by the synchronization server device, based on the trigger and the set procedure:

whether to delete all or a part of the available data on the remote device;

whether to limit access to all or a part of the available data on the remote device;

whether to sever a connection to the remote device;

whether to copy all or a part of the available data on the remote device;

whether to copy encrypt all or a part of the available data on the remote device;

or

whether to reformat all or a part of the available data on the remote device.

11. The medium of claim 8, wherein the set procedure is selected by a user in charge of the data interactively based on a real time evaluation of a situation or by a preset mechanism that is triggered according to certain preset criteria.

12. The medium of claim 8, further comprising checking a sensitivity level of data stored on the remote device;

and

wherein selecting at least one subset of data from the remote device comprises the synchronization server device selecting at least one subset of data from the remote device based on the sensitivity level of data.

13. The medium of claim 8, wherein the at least one subset of data comprises personal data or applications.

14. A synchronization server system for use in controlling access to data held on a remote device, the remote device being remote from the synchronization server system and holding a plurality of sets of data, the synchronization server system configured to:

receive, at a synchronization server and from the remote device, an indication that the remote device is compromised;

determine, by the synchronization server, a trigger of an auto-destruction of data available on the remote device based on the indication;

determine, by the synchronization server, an extent of the auto-destruction based on the trigger according to a set procedure;

select, by the synchronization server, at least one subset of data available on the remote device based on the trigger and the set procedure; and

transmit, to the remote device, a command to execute the determined extent of the auto-destruction of the at least one subset of data available on the remote device.

15. The system of claim 14, wherein determining a trigger of an auto-destruction based on the indication comprises determining by the synchronization server:

whether the remote device is lost or stolen;

whether the remote device is in possession of a terminated employee;

whether the remote device is loaned by one employee to another;

whether a password has not been entered at a specified interval;

whether an incorrect password has been entered;

or

whether a certain communication has not been received at a specified interval.

16. The system of claim 14, wherein determining an extent of the auto-destruction based on the trigger according to a set procedure comprises determining by the synchronization server, based on the trigger and the set procedure:

whether to delete all or a part of the available data on the remote device;

whether to limit access to all or a part of the available data on the remote device;

whether to sever a connection to the remote device;

whether to copy all or a part of the available data on the remote device;

whether to copy encrypt all or a part of the available data on the remote device;

or

whether to reformat all or a part of the available data on the remote device.

17. The system of claim 14, wherein the set procedure is selected by a user in charge of the data interactively based on a real time evaluation of a situation or by a preset mechanism that is triggered according to certain preset criteria.

18. The system of claim 14, wherein the synchronization server is further configured to check a sensitivity level of data stored on the remote device;

and

wherein selecting at least one subset of data from the remote device comprises the synchronization server selecting at least one subset of data from the remote device based on the sensitivity level of data.

19. The system of claim 14, wherein the at least one subset of data comprises personal data.

20. The system of claim 14, wherein the at least one subset of data comprises applications.