US 9,853,820 B2 · Intelligent deletion of revoked data

Abstract

A program on a device communicates with services of an organization and obtains data associated with the organization (also referred to as organization data). The organization data is optionally encrypted using one or more encryption keys, in which case the program has access to one or more decryption keys allowing the organization data to be decrypted and used at the device. Situations can arise in which the organization data stored on the device is to no longer be accessible to a user and/or the device, which is also referred to as the data being revoked. In response to organization data being revoked at the device, various techniques are used to intelligently delete the data, which refers to determining, based on the revocation that occurred and the nature of the data on the device, which data on the device is to be deleted from the device.

Claims20

Dependent claims

A method implemented in a computing device, the method comprising:

determining, based on an indication received from an organization, that access to first organization data on the computing device has been revoked, the first organization data comprising data that is tagged as being associated with the organization;
determining a first subset of the first organization data still associated with one or more valid credentials, the one or more valid credentials corresponding to a user that is associated with the first organization data or a different organization that is associated with the data;
selecting, in response to the access being revoked, second organization data on the computing device associated with revoked user credentials, the second organization data comprising a second subset of the first organization data that does not have at least one valid credential associated with the first organization data, the first and second subsets being mutually exclusive;
and
deleting the second organization data from the computing device.

2 more elements

A computing device comprising:

a storage device configured to store first organization data that includes an embedded tag indicating the first organization data is associated with an organization;
a revocation detector configured to determine whether access to the first organization data on the computing device has been revoked based on an indication from the organization;
a data selector configured to:
receive an indication from the revocation detector that access to the first organization data has been revoked, and
select, in response to the access being revoked, second organization data associated with revoked user credentials on the computing device that is to be deleted, the second organization data comprising at least a portion of the first organization data, the portion of the first organization data comprising a set of data that is not associated with at least one valid user credential;
and
a data deletion module configured to receive an indication from the data selector with respect to the second organization data and to delete from the computing device the second organization data.

4 more elements

A computing device comprising:

a storage device configured to store first organization data embedded with a tag indicating that the first organization data is associated with an organization;
a data selector configured to select second organization data associated with revoked user credentials for deletion from the computing device in response to access to the first organization data on the computing device having been revoked by the organization, the second organization data comprising a subset of the first organization data, the selection of the second organization data comprising selecting, for the second organization data, any of the first organization data that is not associated with at least one valid credential, a remaining portion of the first organization data not selected for deletion, the remaining portion associated with at least one valid credential corresponding to one or more users that are associated with the organization data or an organization that is associated with the data;
and
a data deletion module configured to receive an indication from the data selector of the second organization data and delete from the computing device the second organization data.

1 more element

Dependencies are inferred from the claim text.

Intelligent deletion of revoked data

Life of this patent

Intelligent deletion of revoked data

Life of this patent

Abstract

Claims20