Securing enterprise data on mobile devices
View Patent ↗Embodiments include method, systems and computer program products for securing enterprise data in a mobile computing environment. Aspects include receiving, by an application disposed on a mobile computing device, a request to access the enterprise data stored on the mobile computing device in an encrypted format and determining whether the mobile computing device is in communication with an enterprise network. Based on determining that the mobile computing device is in communication with the enterprise network, aspects include transmitting a decryption request to an encryption application disposed on the enterprise network, receiving the enterprise data in an unencrypted format from the enterprise network and granting access to the enterprise data in an unencrypted format to the application. Based on a determination that the mobile computing device is not communication with the enterprise network, aspects also include denying the request to access the enterprise data.
1. A computer-implemented method for securing enterprise data in a mobile computing environment, the method comprising:
receiving, by an application disposed on a mobile computing device, a request to access the enterprise data stored on the mobile computing device in an encrypted format;
determining whether the mobile computing device is in communication with an enterprise network, wherein the determination that the mobile computing device is in communication with the enterprise network requires that the mobile computing device to be in communication with the enterprise network via a secure enterprise W-Fi network;
based on determining that the mobile computing device is in communication with the enterprise network:
transmitting a decryption request to an encryption application disposed on the enterprise network, wherein transmitting the decryption request to the encryption application disposed on the enterprise network includes transmitting the enterprise data in the encrypted format;
receiving the enterprise data in an unencrypted format from the enterprise network; and
granting access to the enterprise data in an unencrypted format to the application disposed on the mobile computing device;
based on a determination that the mobile computing device is not communication with the enterprise network, denying the request to access the enterprise data.
2. The computer-implemented method of claim 1 , wherein an encryption key utilized by the encryption application is only stored on the enterprise network.
3. The computer-implemented method of claim 1 , wherein the determination that the mobile computing device is in communication with the enterprise network comprises determining a type of a communications network the mobile computing device is connected to.
4. The computer-implemented method of claim 3 , wherein the type of the communications network includes a public communications network and a private communications network.
5. The computer-implemented method of claim 1 , further comprising:
updating the enterprise data in a decrypted format by the application to create an updated enterprise data;
receiving, by the application disposed on the mobile computing device, a request to store the updated enterprise data in the encrypted format;
based on determining that the mobile computing device is in communication with the enterprise network:
transmitting an encryption request to the encryption application disposed on the enterprise network;
receiving the updated enterprise data in the encrypted format from the enterprise network; and
storing the updated enterprise data in the encrypted format on the mobile computing device.