Method of operating a computing device, computing device and computer program
View Patent ↗A data access application key is generated. The data access application key is for use by a data access application to enable decryption of data that is stored in encrypted form on a computing device using the data access application key. The data access application key is generated using an identifier of the data access application and an application key that is specific to at least one of the computing device and/or a user of the computing device.
1. A method of operating a computing device, the method comprising:
generating a first data access application key for use by a first data access application running on the computing device to enable decryption of first data that is stored in encrypted form on the computing device using the first data access application key in order to provide a user of the computing device with access to the first data, wherein the first data access application key is useable by the first data access application to decrypt a key that was used to encrypt the first data in order to enable the first data access application to decrypt the first data,
wherein the first data access application key is generated using an identifier of the first data access application and an application key that is specific to at least one of the computing device and the user of the computing device, the application key being different from the identifier of the first data access application;
generating a second data access application key for use by a second data access application running on the computing device to enable decryption of second data that is stored in encrypted form on the computing device using the second data access application key in order to provide a user of the computing device with access to the second data,
wherein the second data access application key is generated using an identifier of the second data access application and the application key that is specific to at least one of the computing device and the user of the computing device, the application key being different from the identifier of the second data access application, and
wherein the first data access application key is different from the second data access application key.
2. The method according to claim 1 , wherein the application key that is specific to at least one of the computing device and the user of the computing device is received at the computing device from the a remote data store.
3. The method according to claim 1 , wherein the application key is generated based on an identifier of the at least one of the computing device and the user of the computing device.
4. A computing device, comprising:
a memory comprising executable computer program code;
a processor in data communication with the memory and configured to execute the computer program code and cause the computing device to:
generate a first data access application key for use by a first data access application running on the computing device to enable decryption of first data that is stored in encrypted form on the computing device using the first data access application key in order to provide a user of the computing device with access to the first data, wherein the first data access application key is useable by the first data access application to decrypt a key that was used to encrypt the first data in order to enable the first data access application to decrypt the first data,
wherein the first data access application key is generated using an identifier of the first data access application and an application key that is specific to at least one of the computing device and the user of the computing device, the application key being different from the identifier of the first data access application;
generate a second data access application key for use by a second data access application running on the computing device to enable decryption of second data that is stored in encrypted form on the computing device using the second data access application key in order to provide a user of the computing device with access to the second data,
wherein the second data access application key is generated using an identifier of the second data access application and the application key that is specific to at least one of the computing device and the user of the computing device, the application key being different from the identifier of the second data access application; and
wherein the first data access application key is different from the second data access application key.
5. The computing device according to claim 4 , wherein the processor is configured to execute the computer program code and further cause the computing device to:
receive the application key that is specific to at least one of the computing device and the user of the computing device from a remote data store.
6. The computing device according to claim 4 , wherein the application key is generated based on an identifier of the at least one of the computing device and the user of the computing device.
7. A non-transitory, computer-readable storage medium comprising executable computer program code that, when executed by a processor in a computing device, cause the computing device to perform a method, the method comprising:
generating a first data access application key for use by a first data access application running on the computing device to enable decryption of first data that is stored in encrypted form on the computing device using the first data access application key in order to provide a user of the computing device with access to the first data, wherein the first data access application key is useable by the first data access application to decrypt a key that was used to encrypt the first data in order to enable the first data access application to decrypt the first data,
wherein the first data access application key is generated using an identifier of the first data access application and an application key that is specific to at least one of the computing device and the user of the computing device, the application key being different from the identifier of the first data access application;
generating a second data access application key for use by a second data access application running on the computing device to enable decryption of second data that is stored in encrypted form on the computing device using the second data access application key in order to provide a user of the computing device with access to the second data,
wherein the second data access application key is generated using an identifier of the second data access application and the application key that is specific to at least one of the computing device and the user of the computing device, the application key being different from the identifier of the second data access application; and
wherein the first data access application key is different from the second data access application key.
8. The storage medium according to claim 7 , comprising code such that the computing device is arranged to receive the application key that is specific to at least one of the computing device and the user of the computing device from a remote data store.
9. The storage medium according to claim 7 , wherein the application key is generated based on an identifier of the at least one of the computing device and the user of the computing device.
10. The method of claim 1 , wherein the application key is specific to the user of the computing device.
11. The computing device of claim 4 , wherein the application key is specific to the user of the computing device.
12. The storage medium of claim 7 , wherein the application key is specific to the user of the computing device.