Protecting data in a mobile environment
AssigneeMarble Security, Inc.
InventorRamana M. Mylavarapu
Life of this patent
Estimating the term…
Abstract
A system for protecting data in a mobile environment is described. According to the system, a mobile device transmits first data to a server. The mobile device receives second data from the server that is responsive to the first data. The mobile device uses the received second data, together with third data stored on the mobile device, to decrypt fourth data stored in encrypted form on the mobile device. Prior to receiving the second data, the state of the mobile device is inadequate to decrypt the fourth data.
Claims51
A data security method in a mobile device, the method comprising:
- transmitting first data from the mobile device to a server;
- receiving second data from the server that is responsive to the first data;
- and
- using the received second data together with third data stored on the mobile device to decrypt fourth data stored in encrypted form on the mobile device to obtain fifth data, such that, prior to receiving the second data, the state of the mobile device is inadequate to decrypt the fourth data.
One or more instances of computer-readable media collectively having contents configured to cause a mobile device to perform a data security method, the method comprising:
- transmitting first data from the mobile device to a server;
- receiving second data from the server that is responsive to the first data;
- and
- using the received second data together with third data stored on the mobile device to decrypt fourth data stored in encrypted form on the device to obtain fifth data, such that, prior to receiving the second data, the state of the mobile device is inadequate to decrypt the fourth data.
The instances of computer-readable media of claim A16 wherein the first data includes a device certificate stored in the mobile device.
A data security method in a server, the method comprising:
- receiving first data from a mobile device;
- in response to receiving the first data, transmitting to the mobile device second data usable by the mobile device together with third data stored on the mobile device to decrypt fourth data stored in encrypted form on the mobile device to obtain fifth data, such that, prior to receiving the second data, the state of the mobile device is inadequate to decrypt the fourth data.
One or more instances of computer-readable media collectively having contents configured to cause a server to perform a data security method, the method comprising:
- receiving first data from a mobile device;
- in response to receiving the first data, transmitting to the mobile device second data usable by the mobile device together with third data stored on the mobile device to decrypt fourth data stored in encrypted form on the mobile device to obtain fifth data, such that, prior to receiving the second data, the state of the mobile device is inadequate to decrypt the fourth data.
One or more instances of computer-readable media directly connected to a mobile device that collectively contain a secure data store data structure, the data structure comprising:
- user data that has been encrypted using an encryption key, no computer-readable media directly connected to the mobile device containing the encryption key in any form;
- and
- a secondary key usable to decrypt the encryption key if received in encrypted form from a device external to the mobile device,
- such that, if the mobile device receives the encryption key in encrypted form, the mobile device can use the secondary key to decrypt the encryption key, then in turn using encryption key to decrypt the user data.
Dependencies are inferred from the claim text.