System and method for preventing access to data on a compromised remote device

• US 9,965,643 B2
• Filed: 04/28/2017
• Issued: 05/08/2018
• Est. Priority Date: 08/09/2002
• Status: Active Grant

• Current Assignee: Blackberry Limited
• Original Assignee: Blackberry Limited
• Inventors: Mendez, Daniel J., NG, Mason
• Primary Examiner(s): Avery, Jeremiah
• Application Number:
  US15/499,995
• Publication Number:
  US 20170228553A1
• Time in Patent Office: 375 Days
• Field of Search: None
• CPC Class Codes: G06F 21/604 Tools and structures for managing or administering access control systems
• CPC Class Codes: G06F 21/62 Protecting access to data via a platform, e.g. using keys or access control rules
• CPC Class Codes: G06F 21/6209 to a single file or object, e.g. in a secure envelope, encrypted and accessed using a key, or with access control rules appended to the object itself
• CPC Class Codes: G06F 21/6218 to a system of files or objects, e.g. local or distributed file system or database
• CPC Class Codes: G06F 2221/2143 Clearing memory, e.g. to prevent the data from being stolen
• CPC Class Codes: H04L 63/083 using passwords cryptographic mechanisms or cryptographic arrangements for entity authentication using a predetermined code H04L9/3226
• CPC Class Codes: H04L 63/10 for controlling access to devices or network resources
• CPC Class Codes: H04L 63/14 for detecting or protecting against malicious traffic
• CPC Class Codes: H04L 63/1416 Event detection, e.g. attack signature detection
• CPC Class Codes: H04L 63/1425 Traffic logging, e.g. anomaly detection
• CPC Class Codes: H04L 63/1441 Countermeasures against malicious traffic countermeasures against attacks on cryptographic mechanisms H04L9/002
• CPC Class Codes: H04L 67/1095 Replication or mirroring of data, e.g. scheduling or transport for data synchronisation between network nodes
• CPC Class Codes: H04W 12/06 Authentication
• CPC Class Codes: H04W 12/122 Counter-measures against attacks; Protection against rogue devices
• CPC Class Codes: H04W 12/126 Anti-theft arrangements, e.g. protection against subscriber identity module [SIM] cloning
• CPC Class Codes: H04W 12/128 Anti-malware arrangements, e.g. protection against SMS fraud or mobile malware

Abstract

This invention discloses a system and method for selective erasure, encryption and or copying of data on a remote device if the remote device has been compromised or the level of authorization of a roaming user in charge of the remote device has been modified.

Claims

1. A method, comprising:

transmitting, from a device and to a remote synchronization server, an indication that the device is compromised; and

in response to transmitting the indication, receiving, at the device and from the remote synchronization server, an instruction that instructs the device to execute an auto-destruction of at least one subset of data available on the device, the instruction further instructing the device to sever a connection to the remote synchronization server.

2. The method of claim 1, wherein the remote synchronization server controls access to the data available on the device.

3. The method of claim 1, wherein the indication is transmitted to the remote synchronization server in response to at least one of:

a theft prevention mechanism has been triggered;

a password has not been entered at a specified interval;

an incorrect password has been entered;

or

a certain communication has not been received from the remote synchronization server at a specified interval.

4. The method of claim 1, wherein the auto-destruction of at least one subset of data comprises at least one of reformatting the device, erasing applications, erasing certain data on the device.

5. The method of claim 1, wherein the at least one subset of data comprises at least one of personal data, synchronized data, non-synchronized data, or applications.

6. The method of claim 1, wherein the instruction further instructs the device to copy data to the remote synchronization server before the auto-destruction.

7. A device, comprising:

a memory; and

at least one hardware processor communicatively coupled with the memory and configured to;

transmit, from the device and to a remote synchronization server, an indication that the device is compromised; and

in response to transmitting the indication, receive, at the device and from the remote synchronization server, an instruction that instructs the device to execute an auto-destruction of at least one subset of data available on the device, the instruction further instructing the device to sever a connection to the remote synchronization server.

8. The device of claim 7, wherein the remote synchronization server controls access to the data available on the device.

9. The device of claim 7, wherein the indication is transmitted to the remote synchronization server in response to at least one of:

a theft prevention mechanism has been triggered;

a password has not been entered at a specified interval;

an incorrect password has been entered;

or

a certain communication has not been received from the remote synchronization server at a specified interval.

10. The device of claim 7, wherein the auto-destruction of at least one subset of data comprises at least one of reformatting the device, erasing applications, erasing certain data on the device.

11. The device of claim 7, wherein the at least one subset of data comprises at least one of personal data, synchronized data, non-synchronized data, or applications.

12. The device of claim 7, wherein the instruction further instructs the device to copy data to the remote synchronization server before the auto-destruction.

13. A non-transitory computer-readable medium containing instructions which, when executed, cause a device to perform operations comprising:

transmitting, from the device and to a remote synchronization server, an indication that the device is compromised; and

in response to transmitting the indication, receiving, at the device and from the remote synchronization server, an instruction that instructs the device to execute an auto-destruction of at least one subset of data available on the device, the instruction further instructing the device to sever a connection to the remote synchronization server.

14. The non-transitory computer-readable medium of claim 13, wherein the remote synchronization server controls access to the data available on the device.

15. The non-transitory computer-readable medium of claim 13, wherein the indication is transmitted to the remote synchronization server in response to at least one of:

a theft prevention mechanism has been triggered;

a password has not been entered at a specified interval;

an incorrect password has been entered;

or

a certain communication has not been received from the remote synchronization server at a specified interval.

16. The non-transitory computer-readable medium of claim 13, wherein the auto-destruction of at least one subset of data comprises at least one of reformatting the device, erasing applications, erasing at least one of personal data, synchronized data, or non-synchronized data on the device.

17. The non-transitory computer-readable medium of claim 13, wherein the instruction further instructs the device to copy data to the remote synchronization server before the auto-destruction.