System and device for data protection and method thereof

A non-transitory computer readable storage medium, comprising instructions which, when executed by a processor, performs steps of operating a user device, the steps comprising:

• receiving a command from a user to power on the user device, wherein a storage device of the user device is encrypted in a power-off state;
• determining, by a first monitoring operation of the user device whether the user device is located within a restricted zone through accessing a server located within the restricted zone in response to the user device being powered on and before an operating system of the user device is executed, wherein the server comprises a key server configured to store a key for encrypting or decrypting the user device;
• keeping the storage device encrypted, by the user device, in response to determining the user device as being outside the restricted zone through unsuccessfully accessing the server;
• and
• performing, by the user device, a second monitoring operation and determining whether a risk condition of the user device as being located within the restricted zone exists.

A user device, comprising:

• a processor;
• a storage device coupled to the processor;
• and
• a monitoring entity coupled to the processor and the storage device and configured to perform the steps of:
• determining whether the user device is located within a restricted zone through accessing a server located within the restricted zone in response to the user device being powered on and before an operating system of the user device is executed, wherein the server comprises a key server configured to store a key for encrypting or decrypting the user device;
• and
• granting access to the user device for executing the operating system of the user device in response to determining the user device as being within the restricted zone through successfully accessing the server.