Device state driven encryption key management

1. A computer device, comprising:

a memory configured to store data and instructions; and

a processor in communication with the memory, wherein the processor is configured to:

generate level two encrypted image data by using a level two encryption key to encrypt image data associated with a camera application;

access the level two encrypted image data using a level two decryption key, wherein the level two decryption key is configured to be removed from the memory responsive to the computer device being locked;

determine that a current device state of the computer device is locked;

remove the level two decryption key from the memory responsive to the computer device being locked;

use a temporary decryption key in the memory to access the level two encrypted image data for image playback while the computer device is locked, wherein the temporary decryption key is configured to be removed from the memory responsive to the computer device being unlocked;

determine that the current device state of the computer device has changed to unlocked;

remove the temporary decryption key from the memory responsive to the computer device being unlocked;

compute a new level two decryption key responsive to the computer device being unlocked; and

access the level two encrypted image data using the new level two decryption key.

2. The computer device of claim 1 , wherein the processor is further configured to:

use a level one encryption key to encrypt the image data associated with the camera application; and

use a level one decryption key to access level one encrypted image data.

3. The computer device of claim 2 , wherein the processor is further configured to:

identify an occurrence of a trigger event; and

use the level two encryption key to perform additional encryption on the level one encrypted image data in response to the trigger event occurring.

4. The computer device of claim 3 , wherein the trigger event is one or more of a device state change, a location change of the computer device, an expiration of a timer, another user account accessing the computer device, removing notifications, user input, a policy push to the computer device, geofencing, a Bluetooth device presence change, a network change, turning off a display, or turning on the display.

5. The computer device of claim 2 , wherein the processor is further configured to:

receive an indication of a reboot event of the computer device.

6. The computer device of claim 5 , wherein the processor is further configured to:

remove the level one decryption key from the memory in response to the reboot event occurring.

7. A computer device comprising:

a memory configured to store data and instructions; and

a processor in communication with the memory, wherein the processor is configured to:

generate level one encrypted data by using a level one encryption key to encrypt data associated with at least one application, wherein the level one encryption key is configured to remain in the memory until the computer device reboots;

use a level one decryption key to access the level one encrypted data;

receive an indication of a reboot event of the computer device;

receive a user entropy;

maintain the level one decryption key in the memory in response to the reboot event and receiving the user entropy; and

access the level one encrypted data after the reboot event using the level one decryption key.

8. The computer device of claim 7 , wherein the processor is further configured to:

determine that a current device state of the computer device is unlocked; and

remove the level one decryption key from the memory.

9. A method comprising:

generating, by an operating system on a computer device, level two encrypted image data by using a level two encryption key to encrypt image data associated with a camera application;

accessing the level two encrypted image data using a level two decryption key, wherein the level two decryption key is configured to be removed from a memory of the computer device responsive to the computer device being locked;

determining that a current device state of the computer device is locked;

removing the level two decryption key from the memory responsive to the computer device being locked;

using a temporary decryption key in the memory of the computer device to access the level two encrypted image data for image playback while the computer device is locked, wherein the temporary decryption key is configured to be removed from the memory responsive to the computer device being unlocked;

determining that the current device state of the computer device has changed to unlocked;

removing the temporary decryption key from the memory responsive to the computer device being unlocked;

computing a new level two decryption key responsive to the computer device being unlocked; and

accessing the level two encrypted image data using the new level two decryption key.

10. The method of claim 9 , further comprising:

using a level one encryption key to encrypt the image data associated with the camera application; and

using a level one decryption key to access level one encrypted image data.

11. The method of claim 10 , further comprising:

identifying an occurrence of a trigger event; and

using the level two encryption key to perform additional encryption on the level one encrypted image data in response to the trigger event occurring.

12. The method of claim 11 , wherein the trigger event is one or more of a device state change, a location change of the computer device, an expiration of a timer, another user account accessing the computer device, removing notifications, user input, a policy push to the computer device, geofencing, a Bluetooth device presence change, a network change, turning off a display, or turning on the display.

13. The method of claim 10 , further comprising:

receiving an indication of a reboot event of the computer device.

14. The method of claim 13 , further comprising:

removing the level one decryption key from the memory in response to the reboot event occurring.

15. A method comprising:

generating, by a processor of a computer device, level one encrypted data by using a level one encryption key to encrypt data associated with at least one application, wherein the level one encryption key is configured to remain in a memory of the computer device until the computer device reboots;

using a level one decryption key to access the level one encrypted data;

receiving an indication of a reboot event of the computer device;

receiving a user entropy;

maintaining the level one decryption key in the memory in response to the reboot event and receiving the user entropy; and

accessing the level one encrypted data after the reboot event using the level one decryption key.

16. The method of claim 15 , further comprising:

determining that a current device state of the computer device is unlocked; and

removing the level one decryption key from the memory.

17. A non-transitory computer-readable medium storing instructions executable by a computer device, comprising:

at least one instruction for causing the computer device to generate level two encrypted image data by using a level two encryption key to encrypt image data associated with a camera application;

at least one instruction for causing the computer device to access the level two encrypted image data using a level two decryption key, wherein the level two decryption key is configured to be removed from a memory of the computer device responsive to the computer device being locked;

at least one instruction for causing the computer device to determine that a current device state of the computer device is locked;

at least one instruction for causing the computer device to remove the level two decryption key from the memory responsive to the computer device being locked;

at least one instruction for causing the computer device to use a temporary decryption key in the memory of the computer device to access the level two encrypted image data for image playback while the computer device is locked, wherein the temporary decryption key is configured to be removed from the memory responsive to the computer device being unlocked;

at least one instruction for causing the computer device to determine that the current device state of the computer device has changed to unlocked;

at least one instruction for causing the computer device to remove the temporary decryption key from the memory responsive to the computer device being unlocked;

at least one instruction for causing the computer device to compute a new level two decryption key responsive to the computer device being unlocked; and

at least one instruction for causing the computer device to access the level two encrypted image data using the new level two decryption key.