# US 10,372,383 B2 · Providing secure access to data in mobile devices > Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt - Number: US 10,372,383 B2 - Document ID: US10372383B2 - Status: Granted - Kind: B2 - Application number: 15/095,920 - Filed: 2016-04-11 - Published: 2016-10-20 - Granted: 2019-08-06 - Earliest claimed: 2015-04-15 - Assignees: EMC IP Holding Company LLC - Applicants: EMC Corporation - Inventors: Patrick Minggang Lu; Chao Chen; Grissom Tianqing Wang; Yong Que; Lu Lei - Web page: https://patentgrep.com/patent/US10372383B2 ## CPC - H04W 12/08: Access security - G06F 3/061: {Improving I/O performance} - G06F 3/0623: {in relation to content} - G06F 3/0629: {Configuration or reconfiguration of storage systems} - G06F 3/0637: {Permissions} - G06F 3/067: {Distributed or networked storage systems, e.g. storage area networks [SAN], network attached storage [NAS]} - G06F 3/0683: {Plurality of storage devices} - G06F 13/16: for access to memory bus (G06F13/28 takes precedence) - G06F 13/4068: {Electrical coupling} - G06F 16/2255: {Hash tables} - G06F 16/245: Query processing - G06F 21/6272: {by registering files or documents with a third party} - G06F 2221/2111: Location-sensitive, e.g. geographical location, GPS - G06F 2221/2143: Clearing memory, e.g. to prevent the data from being stolen - H04W: WIRELESS COMMUNICATION NETWORKS (broadcast communication H04H; communication systems using wireless links for non-selective communication, e.g. wireless extensions H04M1/72) - G06F: ELECTRIC DIGITAL DATA PROCESSING (computer systems based on specific computational models G06N) ## Abstract Embodiments of the present disclosure provide a method, system and computer program product for providing a secure access to data in mobile devices by acquiring the data from one of a plurality of remote storage devices in response to receiving an access request for the data from one or more applications; storing the data in a secure memory space in the mobile device; providing the one or more applications with an access to the data in the secure memory space when a predetermined condition is satisfied, wherein the predetermined condition at least comprises the one or more applications having an access permission to the secure memory space. ## Claims ### Claim 1 A method for providing secure access to data in mobile devices, the method comprising: receiving, by a mobile device, an access request for the data from one or more applications; in response, transmitting, from the mobile device, to a remote storage index server, a query comprising geographical location information of the mobile device; acquiring the data from one of a plurality of remote storage devices, in response to receiving the access request, including selecting the one remote storage device from the plurality of remote storage devices based at least partially on the geographical location information of the mobile device; storing the data in a secure memory space in the mobile device; and providing the one or more applications with access to the data in the secure memory space when a predetermined condition is satisfied, wherein the predetermined condition at least comprises the one or more applications having access permission to the secure memory space; wherein the mobile device is enabled to empty the secure memory space at end of access to the data. ### Claim 2 (depends on 1) The method according to claim 1, further comprising: acquiring, by the selected remote storage device, a most recent update of the data from a remote backup storage device based at least partially on an access history of the mobile device; and transmitting the most recent update of the data from the remote backup storage device to the mobile device. ### Claim 3 (depends on 1) The method according to claim 1, further comprising: emptying the secure memory space on completion of the access to the data. ### Claim 4 (depends on 1) The method according to claim 1, wherein the predetermined condition further comprises at least one of a signature information of the application, a type of the application and a password provided by the application. ### Claim 5 (depends on 1) The method according to claim 1, wherein providing the one or more applications with an access to data in the secure memory space further comprises: receiving a write operation for the data; writing the data; and periodically transmitting the written data to the remote storage device. ### Claim 6 (depends on 1) The method of claim 1, wherein the secure memory space is sized based at least on a number of the one or more applications or a size of the data. ### Claim 7 (depends on 1) The method according to claim 1, wherein storing the data in the secure memory space in the mobile device further comprises: classifying and storing the data in the secure memory space according to an application specific to the data. ### Claim 8 A system for providing secure access to data in mobile devices, the system comprising a processor configured to: receive, by a mobile device, an access request for the data from one or more applications; in response, transmit, from the mobile device, to a remote storage index server, a query comprising geographical location information of the mobile device; acquire the data from one of a plurality of remote storage devices in response to receiving the access request, including selecting the one remote storage device from the plurality of remote storage devices based at least partially on the geographical location information of the mobile device; store the data in a secure memory space in the mobile device; and provide the one or more applications with access to the data in the secure memory space when a predetermined condition is satisfied, wherein the predetermined condition at least comprises the one or more applications having an access permission to the secure memory space; wherein the mobile device is enabled to empty the secure memory space at end of access to the data. ### Claim 9 (depends on 8) The system according to claim 8, further comprises: acquiring, by the selected remote storage device, a most recent update of the data from a remote backup storage device based at least partially on an access history of the mobile device; and transmitting most recent update of the data from the remote backup storage device to the mobile device. ### Claim 10 (depends on 8) The system according to claim 8, further configured to: empty the secure memory space on completion of the access to the data. ### Claim 11 (depends on 8) The system according to claim 8, wherein the predetermined condition further comprises at least one of a signature information of the application, a type of the application and a password provided by the application. ### Claim 12 (depends on 8) The system according to claim 8, wherein providing the one or more applications with an access to data in the secure memory space further comprises: receiving a write operation for the data; writing the data; and periodically transmitting the written data to the remote storage device. ### Claim 13 (depends on 8) The system according to claim 8, wherein the secure memory space is sized based at least on a number of the one or more applications or a size of the data. ### Claim 14 (depends on 8) The system according to claim 8, wherein storing the data in the secure memory space in the mobile device further comprises: classifying and storing the data in the secure memory space according to an application specific to the data. ### Claim 15 A computer program product comprising: a non-transitory computer readable medium encoded with computer executable program code, wherein the code enables execution across one or more processors for providing a secure access to data in mobile devices, the method comprising: receiving, by a mobile device, an access request for the data from one or more applications; in response, transmitting, from the mobile device, to a remote storage index server, a query comprising geographical location information of the mobile device; acquiring the data from one of a plurality of remote storage devices, in response to receiving the access, including selecting the one remote storage device from the plurality of remote storage devices based at least partially on the geographical location information of the mobile device; storing the data in a secure memory space in the mobile device, wherein storing further comprises classifying and storing the data in the secure memory space according to an application specific to the data, and the secure memory space is sized based at least on a number of the one or more applications or a size of the data; and providing the one or more applications with an access to the data in the secure memory space when a predetermined condition is satisfied, wherein the predetermined condition at least comprises the one or more applications having an access permission to the secure memory space, and wherein the predetermined condition further comprises at least one of a signature information of the application, a type of the application and a password provided by the application; wherein the mobile device is enabled to empty the secure memory space at end of access to the data. ### Claim 16 (depends on 15) The computer program product according to claim 15, wherein acquiring the data from one of a plurality of remote storage devices further comprises: acquiring, by the selected remote storage device, a most recent update of the data from a remote backup storage device based at least partially on an access history of the mobile device; and transmitting the most recent update of the data from the remote backup storage device to the mobile device. ### Claim 17 (depends on 15) The computer program product according to claim 15, further comprising: emptying the secure memory space on completion of the access to the data. ### Claim 18 (depends on 15) The computer program product according to claim 15, wherein providing the one or more applications with an access to data in the secure memory space further comprises: receiving a write operation for the data: writing the data; and periodically transmitting the written data to the remote storage device. ### Claim 19 (depends on 1) The method according to claim 1, wherein providing the one or more applications with access to the data includes disabling screenshot functionality of the mobile device while the access is provided.