Back to results
US 9,071,580 B2Granted
Method and system for securing data of a mobile communications device
AssigneeBlackBerry Limited
InventorsNicole Pigeon, Van Quy Tu
Life of this patent
Estimating the term…
Abstract
A method and system for securing data of a mobile communications device. The method includes: determining that first application data is data associated with a first server; encrypting the first application data with an encryption key stored in the mobile communications device; storing the encrypted first application data on a memory; receiving a request to access the first application data from an application or a service implemented from the mobile communications device; determining that the application or service is authorized to access the first application data; and in response to said determining, decrypting the first application data with the encryption key.
Claims28
A method of securing data of a mobile communications device, the method comprising:
- generating, at the mobile communications device, an encryption key using at least information specific to the mobile communications device, wherein the encryption key is specific to the mobile communications device and unknown to other devices including a first server, wherein the encryption key is a private encryption key for both encryption and decryption;
- storing the encryption key in the mobile communications device, wherein the encryption key is not exportable from the mobile communications device;
- determining, at the mobile communications device, in response to installation or removal of a file manager application, that first application data is data received from or for sending to the first server;
- in response to determining that the first application data is data received from or for sending to the first server, encrypting the first application data with the encryption key stored in the mobile communications device;
- storing the encrypted first application data on a memory;
- receiving, after storing the encrypted first application data, a request to access the first application data from a second application or a service on the mobile communications device;
- determining that the second application or service is authorized to access data associated with the first server;
- and
- in response to determining that the second application or service is authorized to access data associated with the first server, decrypting the first application data with the encryption key.
6 more elements
A mobile communications device comprising:
- a processor;
- memory;
- and
- a communication subsystem for sending and receiving communications with a server;
- the processor being configured for
- generating an encryption key using at least information specific to the mobile communications device, wherein the encryption key is specific to the mobile communications device and unknown to other devices including the server, wherein the encryption key is a private encryption key for both encryption and decryption;
- storing the encryption key in the mobile communications device, wherein the encryption key is not exportable from the mobile communications device;
- determining, in response to installation or removal of a file manager application, that application data is data received from or for sending to the server;
- in response to determining that the application data is data received from or for sending to the server, encrypting the application data with the encryption key stored in the mobile communications device;
- storing the encrypted application data in the memory;
- receiving, after storing the encrypted application data, a request to access the encrypted application data by a second application or a service on the device;
- determining that the second application or service is authorized to access the encrypted application data;
- and
- in response to determining that the second application or service is authorized to access data associated with the server, decrypting the application data.
11 more elements
A non-transitory computer readable medium having instructions stored thereon for securing data of a mobile communications device, the instructions comprising instructions for:
- generating, at the mobile communications device, an encryption key using at least information specific to the mobile communications device, wherein the encryption key is specific to the mobile communications device and unknown to other devices including a first server, wherein the encryption key is a private encryption key for both encryption and decryption;
- storing the encryption key in the mobile communications device, wherein the encryption key is not exportable from the mobile communications device;
- determining, at the mobile communications device, in response to installation or removal of a file manager application, that first application data is data received from or for sending to the first server;
- in response to determining that the first application data is data received from or for sending to the first server, encrypting the first application data with the encryption key stored in the mobile communications device;
- storing the encrypted first application data on a memory;
- receiving, after storing the encrypted first application data, a request to access the first application data from a second application or a service on the mobile communications device;
- determining that the second application or service is authorized to access the data associated with the first server;
- and
- in response to determining that the second application or service is authorized to access data associated with the first server, decrypting the first application data with the encryption key.
6 more elements
Dependencies are inferred from the claim text.