System and method of secure garbage collection on a mobile device
View Patent ↗A method and system for performing garbage collection involving sensitive information on a mobile device. Secure information is received at a mobile device over a wireless network. The sensitive information is extracted from the secure information. A software program operating on the mobile device uses an object to access the sensitive information. Secure garbage collection is performed upon the object after the object becomes unreachable.
1. One or more non-transitory computer readable media comprising computer readable instructions that, when executed, cause a mobile device to perform:
receiving secure information over a wireless network;
extracting sensitive information from the secure information;
storing the sensitive information in memory of the mobile device, wherein the sensitive information is accessible using an object;
unreferencing the object;
determining that the object has become unreachable because the object was unreferenced;
based upon the determination that the object has become unreachable, calling a wipe function to overwrite a memory of the mobile device where the unreachable object is stored; and
reclaiming the memory that the object was using.
2. The non-transitory computer readable media of claim 1 , wherein the mobile device is a personal digital assistant.
3. The non-transitory computer readable media of claim 1 , wherein the mobile device is a mobile communication device.
4. The non-transitory computer readable media of claim 1 , wherein the mobile device is a cellular telephone with data messaging capabilities.
5. The non-transitory computer readable media of claim 1 , wherein the mobile device is a wireless two-way communication device.
6. The non-transitory computer readable media of claim 1 , wherein the mobile device is a data messaging device.
7. The non-transitory computer readable media of claim 1 , wherein the mobile device is a two-way pager.
8. The non-transitory computer readable media of claim 1 , wherein the mobile device is a wireless Internet appliance.
9. The non-transitory computer readable media of claim 1 , wherein the wireless network includes means for providing the wireless network.
10. The non-transitory computer readable media of claim 1 , wherein the secure information is an S/MIME encrypted message.
11. The non-transitory computer readable media of claim 10 , wherein the sensitive information is an unencrypted version of the S/MIME message.
12. The non-transitory computer readable media of claim 11 , wherein the secure message was unencrypted by obtaining and applying a private key to the encrypted S/MIME message.
13. The non-transitory computer readable media of claim 1 , wherein the sensitive information arises from use of a Personal Information Management (PIM) application.
14. The non-transitory computer readable media of claim 1 , wherein overwriting the unreachable object includes overwriting the memory location where the unreachable object is stored with a sequence of bits comprising all zeros, all ones, or random data.
15. The non-transitory computer readable media of claim 1 , wherein the object is a user interface object configured to display the sensitive information.