System and method for preventing access to data on a compromised remote device

Patent metadata

Field	Value
Publication number	US-11017105-B2
Application number	US-201815963843-A
Country	US
Kind code	B2
Filing date	Apr 26, 2018
Priority date	Aug 9, 2002
Publication date	May 25, 2021
Grant date	May 25, 2021

Abstract

The invention discloses a system and method for selective erasure, encryption and or copying of data on a remote device if the remote device has been compromised or the level of authorization of a roaming user in charge of the remote device has been modified.

First claim

What is claimed is:

1. A method, comprising:
determining, at a device, that the device has been compromised, wherein the device is connected to a remote synchronization server;
in response to determining that the device has been compromised, while the device is connected to the remote synchronization server, transmitting an indication to the remote synchronization server;
in response to the indication, receiving an instruction from the remote synchronization server for auto-destruction; and
in response to the instruction for auto-destruction, performing the following operations:
executing an auto-destruction of at least one subset of data on the device; and
severing a connection between the device and the remote synchronization server.

2. The method of claim 1 , wherein the remote synchronization server controls access to the at least one subset of data on the device.

3. The method of claim 1 , wherein determining that the device has been compromised comprises determining that at least one of followings has occurred:
a theft prevention mechanism has been triggered;
a password has not been entered at a specified interval;
an incorrect password has been entered; or
a certain communication has not been received from the remote synchronization server at a specified interval.

4. The method of claim 1 , wherein the auto-destruction of the at least one subset of data comprises at least one of reformatting the device, erasing applications, or erasing the at least one subset of data.

5. The method of claim 1 , wherein the at least one subset of data comprises at least one of personal data, synchronized data, non-synchronized data, or applications.

6. The method of claim 1 , further comprising copying the at least one subset of data to the remote synchronization server before the auto-destruction.

7. The method of claim 6 , further comprising encrypting the at least one subset of data before copying the at least one subset of data to the remote synchronization server.

8. A device, comprising:
a memory; and
at least one hardware processor communicatively coupled with the memory and configured to:
determine that the device has been compromised, wherein the device is connected to a remote synchronization server; and
in response to determining that the device has been compromised, while the device is connected to the remote synchronization server, transmit an indication to the remote synchronization server;
in response to the indication, receive an instruction from the remote synchronization server for auto-destruction; and
in response to the instruction for auto-destruction:
execute an auto-destruction of at least one subset of data on the device; and
sever a connection between the device and the remote synchronization server.

9. The device of claim 8 , wherein the remote synchronization server controls access to the at least one subset of data on the device.

10. The device of claim 8 , wherein determining that the device has been compromised comprises determining that at least one of followings has occurred:
a theft prevention mechanism has been triggered;
a password has not been entered at a specified interval;
an incorrect password has been entered; or
a certain communication has not been received from the remote synchronization server at a specified interval.

11. The device of claim 8 , wherein the auto-destruction of the at least one subset of data comprises at least one of reformatting the device, erasing applications, or erasing the at least one subset of data.

12. The device of claim 8 , wherein the at least one subset of data comprises at least one of personal data, synchronized data, non-synchronized data, or applications.

13. The device of claim 8 , wherein the at least one hardware processor is further configured to copy the at least one subset of data to the remote synchronization server before the auto-destruction.

14. The device of claim 13 , wherein the at least one hardware processor is further configured to encrypt the at least one subset of data before copying the at least one subset of data to the remote synchronization server.

15. A non-transitory computer-readable medium containing instructions which, when executed, cause a device to perform operations comprising:
determining that the device has been compromised, wherein the device is connected to a remote synchronization server; and
in response to determining that the device has been compromised, while the device is connected to the remote synchronization server, transmitting an indication to the remote synchronization server;
in response to the indication, receiving an instruction from the remote synchronization server for auto-destruction; and
in response to the instruction for auto-destruction, performing the following operations:
executing an auto-destruction of at least one subset of data on the device; and
severing a connection between the device and the remote synchronization server.

16. The non-transitory computer-readable medium of claim 15 , wherein the remote synchronization server controls access to the at least one subset of data on the device.

17. The non-transitory computer-readable medium of claim 15 , wherein determining that the device has been compromised comprises determining that at least one of followings has occurred:
a theft prevention mechanism has been triggered;
a password has not been entered at a specified interval;
an incorrect password has been entered; or
a certain communication has not been received from the remote synchronization server at a specified interval.

18. The non-transitory computer-readable medium of claim 15 , wherein the auto-destruction of the at least one subset of data comprises at least one of reformatting the device, erasing applications, or erasing the at least one subset of data.

19. The non-transitory computer-readable medium of claim 15 , wherein the at least one subset of data comprises at least one of personal data, synchronized data, non-synchronized data, or applications.

20. The non-transitory computer-readable medium of claim 15 , wherein the operations further comprise copying the at least one subset of data to the remote synchronization server before the auto-destruction.

Assignees

• Blackberry Ltd

Inventors

• Mendez Daniel J
• Ng Mason

Classifications

• H04L63/083

  using passwords (cryptographic mechanisms or cryptographic arrangements for entity authentication using a predetermined code H04L9/3226) · CPC title

• G06F2221/2143

  Clearing memory, e.g. to prevent the data from being stolen · CPC title

• H04L63/10

  for controlling access to devices or network resources · CPC title

• G06F21/6218

  to a system of files or objects, e.g. local or distributed file system or database · CPC title

• H04L67/1095

  Replication or mirroring of data, e.g. scheduling or transport for data synchronisation between network nodes · CPC title