SYSTEM AND METHOD FOR HANDLING DATA TRANSFERS

• US 20100242086A1
• Filed: 06/07/2010
• Published: 09/23/2010
• Est. Priority Date: 04/30/2004
• Status: Active Grant

• Current Assignee: Blackberry Limited
• Original Assignee: Blackberry Limited
• Inventors: Adams, Neil P., Kirkup, Michael G., Little, Herbert A.
• Granted Patent: US 8,005,469 B2
• Time in Patent Office: Days
• US Class Current: 726/1
• CPC Class Codes: H04L 51/214 using selective forwarding
• CPC Class Codes: H04L 51/58 Message adaptation for wireless communication
• CPC Class Codes: H04L 63/04 for providing a confidential data exchange among entities communicating through data packet networks
• CPC Class Codes: H04L 63/105 Multiple levels of security
• CPC Class Codes: H04M 2203/609 Secret communication
• CPC Class Codes: H04M 3/205 Eavesdropping prevention - indication of insecurity of line or network
• CPC Class Codes: H04M 7/0078 Security; Fraud detection; Fraud prevention
• CPC Class Codes: H04W 12/02 Protecting privacy or anonymity, e.g. protecting personally identifiable information [PII]
• CPC Class Codes: H04W 12/033 of the user plane, e.g. user's traffic
• CPC Class Codes: H04W 12/08 Access security
• CPC Class Codes: H04W 12/30 Security of mobile devices; Security of mobile applications
• CPC Class Codes: H04W 12/37 Managing security policies for mobile devices or for controlling mobile applications
• CPC Class Codes: H04W 12/63 Location-dependent; Proximity-dependent

Abstract

Systems and methods for managing data transfers between a secure location and a less secure location. A data transfer checker operating on a mobile device determines whether an attempted data transfer between two locations is permitted. If it is not permitted, then the data transfer is prevented and the user may be notified of the data transfer prevention.

Claims

1. A method of handling data transfers on a device, comprising:

receiving a data transfer request to transfer data from a first location to a second location;

wherein the first location is more secure than the second location;

retrieving one or more data transfer settings from a data store responsive to receiving the data transfer request;

wherein the data transfer settings indicate whether a data transfer is to occur based upon a security-related aspect associated with the data transfer; and

determining whether to transfer the data from the first location to the second location based upon the data transfer settings;

wherein the data is transferred or not transferred responsive to the determining step.

2. The method of claim 1, wherein the data transfer security-related aspect includes an aspect selected from the group comprising:

level of security associated with destination of the data transfer;

type of communication operation to be performed between the first location and the second location; and

combinations thereof.

3. The method of claim 1, further comprising:

receiving the data transfer settings from an administrator; and

storing the data transfer settings in a data store, responsive to receiving the data transfer settings from the administrator.

4. The method of claim 1, wherein the first location is part of a first service, and the second location is part of a second service.

5. The method of claim 4, wherein the first and second services are selected from a group of services comprising:

a personal electronic mail service, a professional electronic mail service, or an instant messaging service.

6. The method of claim 1, wherein the determining step that is performed based upon the data transfer settings prevents a malicious application from siphoning data contained inside a corporation'"'"'s or government'"'"'s firewall to outside the firewall.

7. The method of claim 1, wherein the first location is a first memory associated with the device, and the second location is a second memory located on another device.

8. The method of claim 1, wherein the device is a mobile wireless communications device.

9. The method of claim 1, wherein the data transfer settings are configured to prevent data transfers using Inter-Process Communications (IPC),

10. The method of claim 1, wherein the data transfer settings are configured to allow predetermined applications to use IPC for data transfer.

11. The method of claim 1, further comprising:

receiving updated data transfer settings from an information technology (IT) administrator; and

replacing the data transfer settings in the data store located on the device with the updated data transfer settings.

12. The method of claim 1, wherein the type of data transfer communication operation includes an operation selected from the group comprising:

data forwarding between service books;

opening an internal and an external connection;

an Inter-Process Communication (IPC) between applications;

a cut-copy-paste type operation between applications; and

combinations thereof.

13. The method of claim 1, wherein the data transfer settings are pre-programmed into the device and can be updated by an administrator.

14. The method of claim 1, wherein a notification is provided to a user interface of the device to indicate that the data transfer is not permitted because of the determining step.

15. The method of claim 1, wherein no notification is provided to a user interface of the device to indicate that the data transfer is not permitted because of the determining step if the data transfer settings do not allow a feedback message.

16. The method of claim 1, wherein the data transfer settings require a data transfer to occur via a source server.

17. Non-transitory computer readable storage medium stored with computer software that comprises program code for carrying out a method according to claim 1.

18. A data transfer apparatus for transferring data on a device from a first location to a second location, the apparatus comprising:

a data store that stores one or more data transfer settings;

wherein the data transfer settings indicate whether a data transfer is to occur based upon a security-related aspect associated with the data transfer; and

a data transfer checker that is configured to retrieve one or more data transfer settings from the data store responsive to the device receiving a request to transfer data from the first location to the second location;

wherein the data transfer checker is configured to prevent the request from being performed responsive to the data transfer settings.

19. A data transfer system for transferring data on a wireless mobile communications device from a first location to a second location, the system comprising:

means for receiving a data transfer request to transfer data from a first location to a second location;

wherein the first location is more secure than the second location;

means for retrieving one or more data transfer settings from a data store responsive to receiving the data transfer request;

wherein the data store is located on the wireless mobile communications device;

wherein the data transfer settings indicate whether a data transfer is to occur based upon a security-related aspect associated with the data transfer;

wherein the data transfer is a transfer selected from the group comprising;

data forwarding between service books;

a cut-copy-paste operation between applications;

applications opening an internal and an external connection;

IPC (interprocess communication) between applications; and

means for determining whether to transfer the data from the first location to the second location based upon the data transfer settings;

wherein the data is transferred or not transferred responsive to the determining of whether to transfer the data from the first location to the second location based upon the data transfer settings.

20. A data transfer system for transferring data on a wireless mobile communications device from a first location to a second location, the system comprising:

a data processor; and

computer readable memory encoded with instructions for commanding the data processor to execute steps including;

receiving a data transfer request to transfer data from a first location to a second location;

wherein the first location is more secure than the second location;

retrieving one or more data transfer settings from a data store responsive to receiving the data transfer request;

wherein the data transfer settings indicate whether a data transfer is to occur based upon a security-related aspect associated with the data transfer; and

determining whether to transfer the data from the first location to the second location based upon the data transfer settings;

wherein the data is transferred or not transferred responsive to the determining step.