Protecting data on a mobile device

• US 9,275,234 B2
• Filed: 03/01/2013
• Issued: 03/01/2016
• Est. Priority Date: 07/26/2012
• Status: Active Grant

• Current Assignee: International Business Machines Corporation
• Original Assignee: International Business Machines Corporation
• Inventors: McGloin, Mark Alexander, Pieczul, Olgierd, Celi, Joseph
• Primary Examiner(s): Nalven, Andrew
• Assistant Examiner(s): Nobahar, Abdulhakim
• Application Number:
  US13/782,284
• Publication Number:
  US 20140032921A1
• Time in Patent Office: 1,096 Days
• Field of Search: None
• US Class Current: 1/1
• CPC Class Codes: G06F 21/554 involving event detection and direct action
• CPC Class Codes: G06F 21/60 Protecting data
• CPC Class Codes: G06F 21/88 Detecting or preventing theft or loss

Abstract

A password protection application is executed on a mobile device and provides an interface by which an authorized user can define and configure a “data protection profile” for the device. This profile defines at least one security event (criteria or condition) associated with the device, and at least one protection action that should occur to protect data on the device upon the triggering of the event. Once defined in a profile, the application monitors for the occurrence of the security event. Upon the occurrence of the specified event, the protection action is enforced on the device to protect the data.

Claims

1. A method of protecting a mobile computing device and private data stored therein, comprising:

providing an interface adapted to receive user-specified configuration information from an authorized user of the mobile computing device;

upon receipt from the authorized user of the user-specified configuration information via the interface, configuring a data protection profile for the authorized user that identifies at least one event, and at least one action to be taken with respect to the private data specified in the data protection profile upon occurrence of the at least one event;

determining whether the at least one event identified in the data protection profile has occurred;

when the at least one event identified in the data protection profile has occurred, enforcing the at least one action to inhibit unauthorized access on the mobile computing device to the private data specified in the data protection profile; and

overriding the data protection profile and thereby ceasing determination of whether the at least one event identified in the data protection profile has occurred upon receipt of other data indicative of a user-configured action;

wherein the configuring, determining, enforcing and overriding operations are carried out in software executing in a hardware element.

2. The method as described in claim 1 wherein the private data is a password associated with an application adapted to be executed on the mobile computing device.

3. The method as described in claim 2 wherein the at least one action disables the password.

4. The method as described in claim 3 wherein the password is disabled by one of:

cleaning the password, removing the password, erasing the password, and encrypting the password.

5. The method as described in claim 1 wherein the at least one event is one of:

device turn-off, device movement outside a configured range, device access outside a configured usage pattern, device movement within a time criteria, device movement with an associated speed or acceleration, and device access with a non-registered biometric.

6. The method as described in claim 1 further including logging data about the security event and the action.

7. The method as described in claim 1 wherein the data protection profile also includes at least a second event, and wherein the at least one action is taken upon concurrent occurrence of both the first event and the second event.

8. The method described in claim 1 wherein the interface is a configurator tool that receives the user-specified configuration information and is operative to generate the data protection profile as a custom profile that is uniquely associated with the user of the mobile computing device.

9. The method as described in claim 1 wherein the data protection profile also includes at least a second event, and wherein the at least one action is taken upon concurrent occurrence of both the first event and the second event.