System and method for protecting data on a mobile device
View Patent ↗Methods and systems are disclosed for protecting data on a mobile device. A data protection module on the mobile device receives a transmission including a secret key. The secret key is used in encrypting data on the device and is then deleted. Subsequent to an event detectable to the mobile device, the data protection module receives another transmission including said secret key. The secret key is then used to decrypt the encrypted data.
1. A method of protecting data on a mobile device, the method comprising:
receiving a transmission including a secret key;
combining the secret key with secret information to generate a new key;
encrypting data on the mobile device using the new key;
deleting the new key subsequent to encrypting the data;
receiving another transmission including the secret key;
combining the secret key and the secret information to regenerate the new key; and
decrypting the encrypted data using the new key.
2. The method of claim 1 , wherein the secret information is received at a user interface of the device.
3. The method of claim 2 , wherein the secret information comprises a password.
4. The method of claim 1 , wherein the secret information is stored on the mobile device.
5. The method of claim 1 , wherein the transmission and the other transmission are both secure transmissions from a trusted party, wherein the data includes a content protection key used in encrypting and decrypting sensitive information on the mobile device, and wherein prior to encrypting the data, the content protection key is used in encrypting the sensitive information.
6. The method of claim 1 , wherein subsequent to encrypting the data, the device is locked, and wherein the device is unlocked subsequent to the device receiving the secret information.
7. The method of claim 1 , wherein the other transmission is received subsequent to an event detectable to the mobile device.
8. The method of claim 7 , wherein the event detectable to the mobile device comprises any one or more of: expiry of a period of time; a change in location of the mobile device; loss or detection of a particular network; and a request from a trusted party.
9. The method of claim 1 , wherein the mobile device receives at a user interface an indication of a period of time, and wherein prior to receiving the secret key, the device transmits a message to a trusted party requesting the secret key.
10. The method of claim 1 , wherein receiving the secret key occurs subsequent to a trusted party receiving a message indicative of the mobile device being in a safe area, the message indicative of the mobile device being in a safe area comprises GPS data transmitted from the mobile device or a communication specifying that the mobile device is in a safe area.
11. A mobile device configured to:
receive a transmission including a secret key;
combine the secret key with secret information to generate a new key;
encrypt data on the mobile device using the new key;
delete the new key subsequent to encrypting the data;
receive another transmission including the secret key;
combine the secret key and the secret information to regenerate the new key; and
decrypt the encrypted data using the new key.
12. The mobile device of claim 11 , wherein the secret information is received at a user interface of the device.
13. The mobile device of claim 12 , wherein the secret information comprises a password.
14. The mobile device of claim 11 , wherein the secret information is stored on the mobile device.
15. The mobile device of claim 11 , wherein the transmission and the other transmission are both secure transmissions from a trusted party, wherein the data includes a content protection key used in encrypting and decrypting sensitive information on the mobile device, and wherein prior to encrypting the data, the content protection key is used in encrypting the sensitive information.
16. The mobile device of claim 11 , wherein subsequent to encrypting the data, the device is locked, and wherein the device is unlocked subsequent to the device receiving the secret information.
17. The mobile device of claim 11 , wherein the other transmission is received subsequent to an event detectable to the mobile device.
18. The mobile device of claim 17 , wherein the event detectable to the mobile device comprises any one or more of: expiry of a period of time; a change in location of the mobile device; loss or detection of a particular network; and a request from a trusted party.
19. The mobile device of claim 11 , wherein the mobile device receives at a user interface an indication of a period of time, and wherein prior to receiving the secret key, the device transmits a message to a trusted party requesting the secret key.
20. The mobile device of claim 11 , wherein receiving the secret key occurs subsequent to a trusted party receiving a message indicative of the mobile device being in a safe area, the message indicative of the mobile device being in a safe area comprises GPS data transmitted from the mobile device or a communication specifying that the mobile device is in a safe area.
21. A computer readable medium memory having stored thereon computer readable instructions executable on a mobile device, the computer readable instructions comprising instructions for:
receiving a transmission including a secret key;
combining the secret key with secret information to generate a new key;
encrypting data on the mobile device using the new key;
deleting the new key subsequent to encrypting the data;
receiving another transmission including the secret key;
combining the secret key and the secret information to regenerate the new key; and
decrypting the encrypted data using the new key.