Method and system for rendering a stolen mobile communications device inoperative

A method comprising:

• determining, at a security component on a mobile communications device, that the mobile communications device is not in the possession of an authorized user;
• when the mobile communications device is determined to not be in the possession of an authorized user, receiving, from a server and at the security component, a cryptographic key;
• encrypting, at the security component, device storage contents with the cryptographic key;
• and
• after encrypting the device storage contents, causing, at the security component, a removal of the cryptographic key on the mobile communications device.

A non-transitory computer-readable medium encoded with a plurality of instructions which, when executed by a processor, cause the processor to perform a method comprising:

• receiving, at a server, an indication that a mobile communications device is not in the possession of an authorized user;
• sending, from the server, a first command for the mobile communications device to encrypt data stored on the mobile communications device using a cryptographic key from the server;
• and
• upon receiving from the mobile communications device confirmation that the data stored has been encrypted, sending, from the server, a second command for the mobile communications device to remove the cryptographic key.