Protecting screenshots of applications executing in a protected workspace container provided in a mobile device

A mobile device, comprising:

• processing circuitry;
• a memory storing program code, wherein the program code stored in the memory is executable on the processing circuitry, and wherein the program code, when executed on the processing circuitry, causes the processing circuitry to:
• execute at least one enterprise application within a protected workspace container in the mobile device, wherein the protected workspace container isolates the enterprise application from at least one personal application executing on the mobile device outside of the protected workspace container;
• receive a screenshot capture request;
• in response to receiving the screenshot capture request, process the screenshot capture request at least in part by causing the processing circuitry to:
• determine whether a graphical user interface being displayed on a display device of the mobile device at the time the screenshot capture request is received is generated at least in part by an enterprise application executing in the protected workspace container, and in response to a determination that the graphical user interface displayed on the display device of the mobile device at the time the screenshot capture request is received is being generated at least in part by an enterprise application executing within the protected workspace container in the mobile device, perform a secure screenshot save operation at least in part by causing the processing circuitry to
• i) store, within the mobile device, a screenshot image of the graphical user interface displayed on the display device of the mobile device at the time the screenshot capture request is received, and ii) prevent the screenshot image from being accessed by the personal application executing on the mobile device outside of the protected workspace container, wherein the stored screenshot image is prevented from being accessed by the personal application executing on the mobile device outside of the protected workspace container at least in part by the processing circuitry encrypting the screenshot image using an encryption key having a corresponding decryption key that is only accessible within the protected workspace container and allowing the decryption key corresponding to the encryption key used to encrypt the screenshot image to be accessed only by the enterprise application executing within the protected workspace container in the mobile device that generated at least part of the graphical user interface being displayed on a display device of the mobile device at the time the screenshot capture request is received.

A non-transitory computer readable medium storing program code for protecting screenshots captured on a mobile device, wherein the program code, when executed by processing circuitry of a mobile device, causes the processing circuitry to perform a method of:

• executing at least one enterprise application within a protected workspace container in the mobile device, wherein the protected workspace container isolates the enterprise application from at least one personal application executing on the mobile device outside of the protected workspace container;
• receiving a screenshot capture request;
• in response to receiving the screenshot capture request, processing the screenshot capture request by:
• determining whether a graphical user interface being displayed on a display device of the mobile device at the time the screenshot capture request is received is generated at least in part by an enterprise application executing in the protected workspace container, and
• in response to determining that the graphical user interface displayed on the display device of the mobile device at the time the screenshot capture request is received is being generated at least in part by an enterprise application executing within the protected workspace container in the mobile device, performing a secure screenshot save operation that includes i) storing, within the mobile device, a screenshot image of the graphical user interface displayed on the display device of the mobile device at the time the screenshot capture request is received, and ii) preventing the screenshot image from being accessed by the personal application executing on the mobile device outside of the protected workspace container, wherein preventing the stored screenshot image from being accessed by the personal application executing on the mobile device outside of the protected workspace container includes encrypting the screenshot image using an encryption key having a corresponding decryption key that is only accessible within the protected workspace container and allowing the decryption key corresponding to the encryption key used to encrypt the screenshot image to be accessed only by the enterprise application executing within the protected workspace container in the mobile device that generated at least part of the graphical user interface being displayed on a display device of the mobile device at the time the screenshot capture request is received.