Method of operating a computing device, computing device and computer program
View Patent ↗Data is stored on a computing device in encrypted form in respective digital containers. At least one data access application is stored on the computing device. A control application of the computing device connects to a remote control center. A command from the remote control center is received at the connected control application. The command contains an action to be taken in respect of at least one of the at least one data access application and the containers stored on the computing device. The command is passed from the connected control application to the data access application or container, and the data access application or container carries out the command.
1. A method of operating a client device, the client device comprising a digital container comprising encrypted data, a data access application, and a control application, the method comprising:
connecting the control application to a remote control center;
receiving, at the control application, a command from the remote control center, the command specifying an action to be taken by at least one of: the data access application or the digital container;
passing the command from the control application to at least one of: the data access application or the digital container; and
carrying out the action specified by the command by at least one of: the data access application or the digital container, wherein the action specified by the command comprises at least one of: an action for prevention of access to data on the client device, a modification and/or addition of policy data relating to data security on the client device, and returning information relating to data security to the remote control center in response to a request.
2. The method according to claim 1 , further comprising: the control application causing the data access application to execute in order to carry out the action specified by the command.
3. The method according to claim 1 , wherein the data access application is unable to connect directly to the remote control server.
4. The method according to claim 1 , wherein the command is encrypted using an encryption key.
5. The method according to claim 4 , wherein the encryption key is one of: a shared secret key of a Diffie-Hellman key exchange, a public key of a public/private key pair sent by the control application to the data access application, or a symmetric session key negotiated between the control application and the data access application during an initial handshake.
6. The method according to claim 1 , wherein the data access application is configured to enable at least one of: viewing, editing, manipulating, transforming, processing, storing or transmitting the data.
7. A client device comprising a digital container comprising encrypted data, a data access application, and a control application, the client device further comprising:
a memory comprising executable computer program code;
a processor in data communication with the memory and configured to execute the computer program code and cause the computing device to:
connect the control application to a remote control center;
receive, at the control application, a command from the remote control center, the command specifying an action to be taken by at least one of: a data access application or a digital container;
pass the command from the control application to at least one of: the data access application or the digital container; and
carry out the action specified by the command by at least one of: the data access application or the digital container, wherein the action specified by the command comprises at least one of: an action for prevention of access to data on the client device, a modification and/or addition of policy data relating to data security on the client device, and returning information relating to data security to the remote control center in response to a request.
8. The client device according to claim 7 , wherein the processor is configured to execute the computer program code and further cause the client device to: cause the control application to cause the data access application to execute in order to carry out the action specified by the command.
9. The client device according to claim 7 , wherein the data access application is unable to connect directly to the remote control server.
10. The client device according to claim 7 , wherein the command is encrypted using an encryption key that is one of: a shared secret key of a Diffie-Hellman key exchange, a public key of a public/private key pair sent by the control application to the data access application, or a symmetric session key negotiated between the control application and the data access application during an initial handshake.
11. The client device according to claim 7 , wherein the data access application is configured to enable at least one of: viewing, editing, manipulating, transforming, processing, storing or transmitting the data.
12. A non-transitory, computer-readable storage medium comprising executable computer program code that, when executed by a processor in a client device comprising a digital container comprising encrypted data, a data access application, and a control application, cause the client device to perform a method, the method comprising:
connecting the control application to a remote control center;
receiving, at the control application, a command from the remote control center, the command specifying an action to be taken by at least one of: the data access application or the digital container;
passing the command from the control application to at least one of: the data access application or the digital container; and
carrying out the action specified by the command by at least one of: the control application or the digital container, wherein the action specified by the command comprises at least one of: an action for prevention of access to data on the client device, a modification and/or addition of policy data relating to data security on the client device, and returning information relating to data security to the remote control center in response to a request.
13. The storage medium according to claim 12 , wherein the method further comprises: the control application causing the data access application to execute in order to carry out the action specified by the command.
14. The storage medium according to claim 12 , wherein the data access application is unable to connect directly to the remote control server.
15. The storage medium according to claim 12 , wherein the command is encrypted using an encryption key that is one of: a shared secret key of a Diffie-Hellman key exchange, a public key of a public/private key pair sent by the control application to the data access application, or a symmetric session key negotiated between the control application and the data access application during an initial handshake.
16. The storage medium according to claim 12 , wherein the data access application is configured to enable at least one of: viewing, editing, manipulating, transforming, processing, storing or transmitting the data.