System and method for preventing access to data on a compromised remote device

• US 8,696,765 B2
• Filed: 09/17/2010
• Issued: 04/15/2014
• Est. Priority Date: 08/09/2002
• Status: Active Grant

• Current Assignee: Blackberry Limited
• Original Assignee: Good Technology Corporation (Blackberry Limited)
• Inventors: Mendez, Daniel J., Ng, Mason
• Primary Examiner(s): Zecher, Cordelia
• Assistant Examiner(s): AVERY, JEREMIAH L
• Application Number:
  US12/885,061
• Publication Number:
  US 20110004941A1
• Time in Patent Office: 1,306 Days
• Field of Search: None
• US Class Current: 726/35
• CPC Class Codes: G06F 21/604 Tools and structures for managing or administering access control systems
• CPC Class Codes: G06F 21/62 Protecting access to data via a platform, e.g. using keys or access control rules
• CPC Class Codes: G06F 21/6209 to a single file or object, e.g. in a secure envelope, encrypted and accessed using a key, or with access control rules appended to the object itself
• CPC Class Codes: G06F 21/6218 to a system of files or objects, e.g. local or distributed file system or database
• CPC Class Codes: G06F 2221/2143 Clearing memory, e.g. to prevent the data from being stolen
• CPC Class Codes: H04L 63/083 using passwords cryptographic mechanisms or cryptographic arrangements for entity authentication using a predetermined code H04L9/3226
• CPC Class Codes: H04L 63/10 for controlling access to devices or network resources
• CPC Class Codes: H04L 63/14 for detecting or protecting against malicious traffic
• CPC Class Codes: H04L 63/1416 Event detection, e.g. attack signature detection
• CPC Class Codes: H04L 63/1425 Traffic logging, e.g. anomaly detection
• CPC Class Codes: H04L 63/1441 Countermeasures against malicious traffic countermeasures against attacks on cryptographic mechanisms H04L9/002
• CPC Class Codes: H04L 67/1095 Replication or mirroring of data, e.g. scheduling or transport for data synchronisation between network nodes
• CPC Class Codes: H04W 12/06 Authentication
• CPC Class Codes: H04W 12/122 Counter-measures against attacks; Protection against rogue devices
• CPC Class Codes: H04W 12/126 Anti-theft arrangements, e.g. protection against subscriber identity module [SIM] cloning
• CPC Class Codes: H04W 12/128 Anti-malware arrangements, e.g. protection against SMS fraud or mobile malware

Abstract

This invention discloses a system and method for selective erasure, encryption and or copying of data on a remote device if the remote device has been compromised or the level of authorization of a roaming user in charge of the remote device has been modified.

Claims

1. A method for use in managing data held on a mobile device, the mobile device comprising a device data store for storing device data and a synchronization client, the synchronization client being a client of a synchronization server remote from the mobile device, the synchronization server being configured to perform a synchronization process with the synchronization client for the synchronization of at least some of said device data with corresponding server data held in a server data store, the mobile device being a client of a device management server remote from the mobile device, and the method comprising:

storing said device data according to a plurality of data categories, each of the categories comprising either a first type of data or a second type of data, the first type of data comprising data items to be synchronized between the mobile device and the synchronization server according to said synchronization process, whereby values of data items of the first type are updated at, the mobile device in response to changes thereto at the server data store and the second type of data comprising data items which are not synchronized between the device data store and the server data store;

receiving, at the device management server, an indication that the mobile device has an unauthorized status, the indication originating from a source other than said mobile device;

the device, management server sending, responsive to receipt of said indication, a request to the mobile device to cease said synchronization process;

the mobile device receiving said request and, responsive thereto, preventing performance of said synchronization process.

2. A method according to claim 1, in which the indication that the mobile device has an unauthorized status comprises a manual entry at the source.

3. A method according to claim 1, wherein said synchronization process comprises updating values of the server data to reflect changes to corresponding values of the device data of the first type.

4. A method according to claim 1, comprising performing said synchronization process periodically.

5. A method according to claim 1, comprising performing said synchronization process automatically, without initiation by a user.

6. A method according to claim 1, comprising performing said synchronization process responsive to an instruction from a user.

7. A method according to claim 1, in which the device data of the first type comprises at least one of e-mail data, calendar data, file data, bookmark data, task data, sales force automation data, customer relations management data, organizational directory data, personal information manager (PIM) data and applications.

8. A method according to claim 1, wherein said indication that the mobile device has an unauthorized status comprises a manual entry at said access control server.

14. The method according to claim 1, comprising:

the mobile device severing a connection between said mobile device and said synchronization server in response to receipt of said indication.

15. A method according to claim 1, wherein the step of preventing performance of said synchronization process comprises preventing a synchronization connection.

9. A device management server for use in managing data held on a mobile device remote therefrom, the mobile device being a client of a synchronization server system and comprising a device data store configured to store device data, the synchronization server;

synchronization process with the mobile device, whereby at least a subset of the device data is synchronized with corresponding server data held in a server data store,

wherein the device data is stored according to a plurality of categories, each of the categories comprising either a first type of data or a second type of data, the first type of data comprising data items to be synchronized between the mobile device and the synchronization server according to said synchronization process whereby values of data items of the first type are updated at the mobile device in response to changes thereto at the server data store, and the second type of data comprising data items which are not synchronized between the mobile device the synchronization server,

wherein the device management server is configured to;

receive an indication that the mobile device has an unauthorized status; and

send, in response to receipt of said indication, a request to the mobile device to cease said synchronization process,

wherein the request results in the mobile device preventing performance of said synchronization process.

10. A device management server according to claim 9, wherein said synchronization process comprises updating values of the server data to reflect changes to corresponding values of the first type of device data.

11. A device management server according to claim 9, wherein the device data of the first type comprises at least one of e-mail data, calendar data, file data, bookmark data, task data, sales force automation data, customer relations management data, organizational directory data, personal information manager (PIM) data and applications.

12. A device management server according to claim 9, wherein the synchronization server comprises a remote access server for enabling a remote access client on the mobile device to access the server data.

16. A device management server according to claim 9, wherein said prevention of performance of a synchronization process comprises prevention of a synchronization connection.

13. A mobile device for use in managing data held thereon, the mobile device being a client of a device management server and comprising:

a device data store for storing device data according to a plurality of categories, each of the categories comprising either a first type of data or a second type of data, the first type of data comprising data items to be synchronized between the mobile device and a synchronization server according to a synchronization process, whereby values of data items of the first type are updated at the mobile device in response to changes thereto at the server data store, the second type of data comprising data items which are not synchronized between the mobile device and the synchronization,

wherein the mobile device is configured to;

receive a request from the device management server to cease said synchronization process, the request being received in response to an indication that the mobile device has an unauthorized status, the indication originating from a source other than the mobile device; and

responsive to receipt of said request, prevent performance of said synchronization process.

17. A mobile device according to claim 13, wherein said prevention of performance of a synchronization process comprises prevention of a synchronization connection.

18. A non-transitory computer-readable storage medium having computer-readable instructions stored thereon, the computer-readable instructions when executed by a computing device causing the computing device to perform a method of managing data, the mobile device being a client of a device management server and comprising:

a device data store for storing device data according to a plurality of categories, each of the categories comprising either a first type of data or a second type of data, the first type of data comprising data items to be synchronized between the mobile device and a synchronization server according to a synchronization process whereby values of data items of the first type are updated at the mobile device in response to changes thereto at the server data store and the second type of data comprising data items which are not synchronized between the mobile device and the synchronization server,

the method comprising;

receiving a request from the device management server to cease said synchronization process, the request being received in response to an indication that the mobile device has an unauthorized status, the indication originating from a source other than the mobile device; and

responsive to receipt of said request, preventing performance of said synchronization process.

19. A non-transitory computer-readable storage medium having computer-readable instructions stored thereon, the computer-readable instructions when executed by a server causing the server to perform a method for use in managing data held a mobile device remote therefrom, the mobile device being a client of a synchronization server system and comprising a device data store holding device data, the synchronization server being configured to perform a synchronization process with the mobile device whereby at least a subset of the device data is synchronized with corresponding server data held in a server data store,

wherein the device data is stored according to a plurality of categories, each of the categories comprising either a first type of data or a second type of data, the first type of data comprising data items to be synchronized between the mobile device and the synchronization server according to said synchronization process whereby values of data items of the first type are updated at the mobile device in response to changes thereto at the server data store, and the second type of data comprising data items which are not synchronized between the mobile device the synchronization server,

the method comprising:

receiving an indication that the mobile device has an unauthorized status, the indication originating from a source other than the mobile device; and

sending, in response to receipt of said indication, a request to the mobile device to cease said synchronization process,

wherein the request results in the mobile device preventing performance of said synchronization process.