System and method of protecting data on a communication device
AssigneeResearch In Motion Limited
InventorsNeil P. Adams, Herbert A. Little
Life of this patent
Estimating the term…
Abstract
A system and method of protecting data on a communication device are provided. Data received when the communication device is in a first operational state is encrypted using a first cryptographic key and algorithm. When the communication device is in a second operational state, received data is encrypted using a second cryptographic key and algorithm. Received data is stored on the communication device in encrypted form.
Claims39
A system of protecting data on a communication device having a first operational state and a second operational state, comprising:
- a key store configured to store a plurality of cryptographic keys;
- a memory configured to store data;
- a wireless receiver;
- and
- a data protection system configured to receive data via the wireless receiver of the communication device, to determine whether the communication device is in the first operational state or the second operational state, to encrypt the received data using a first cryptographic key of the plurality of cryptographic keys if the communication device is in the first operational state or a second cryptographic key of the plurality of cryptographic keys if the communication device is in the second operational state as the data is received at the communication device and before the data is stored in the memory, and to store the encrypted received data in the memory;
- wherein the first of the plurality of cryptographic keys is protected such that in the first operational state, the first of the plurality of cryptographic keys is accessible, and in the second operational state, the first of the plurality of cryptographic keys is inaccessible;
- and
- wherein the data protection system is further configured to determine whether the received data is related to existing data stored in the memory, and to append the encrypted received data to the existing related data in the memory if the received data is related to existing data.
A method of protecting data on a communication device comprising the steps of:
- storing a first protected cryptographic key and a second cryptographic key on the communication device;
- receiving data at the communication device via a wireless receiver of the communication device;
- determining whether the first protected cryptographic key is accessible;
- encrypting the received data using the first protected cryptographic key if the first protected cryptographic key is accessible as the data is received at the communication device and before the data is stored in a memory on the communication device;
- encrypting the received data using the second cryptographic key if the first protected cryptographic key is inaccessible as the data is received at the communication device and before the data is stored in the memory on the communication device;
- and
- storing the encrypted received data in the memory on the communication device;
- wherein the storing the encrypted received data comprises
- determining whether the received data is related to existing data stored in the memory, and
- appending the encrypted received data to the existing related data in the memory if the received data is related to existing data.
A system of protecting data on a communication device comprising:
- means for storing a first protected cryptographic key and a second cryptographic key on the communication device;
- means for receiving data at the communication device via a wireless receiver of the communication device;
- means for determining whether the first protected cryptographic key is accessible;
- means for encrypting the received data using the first protected cryptographic key if the first protected cryptographic key is accessible as the data is received at the communication device and before the data is stored in a memory on the communication device;
- means for encrypting the received data using the second cryptographic key if the first protected cryptographic key is inaccessible as the data is received at the communication device and before the data is stored in the memory on the communication device;
- means for storing the encrypted received data in the memory on the communication device;
- means for determining whether the received data is related to existing data stored in the memory;
- and
- means for appending the encrypted received data to the existing related data in the memory if the received data is related to existing data.
Dependencies are inferred from the claim text.