System and method of secure garbage collection on a mobile device
A method and system for performing garbage collection involving sensitive information on a mobile device. Secure information is received at a mobile device over a wireless network. The sensitive information is extracted from the secure information. A software program operating on the mobile device uses an object to access the sensitive information. Secure garbage collection is performed upon the object after the object becomes unreachable.
1. A method for performing secure garbage collection involving sensitive information on a mobile device, the method comprising:
receiving secure information over a wireless network;
extracting sensitive information from the secure information;
storing the sensitive information in memory of the mobile device, wherein the sensitive information is accessible using an object;
initiating a secure garbage collection module to detect that the object is unreachable and call a wipe function;
unreferencing the object;
determining that the object has become unreachable because the object was unreferenced;
based upon the determination that the object has become unreachable, obliterating the unreachable object from the memory; and
reclaiming the memory that the object was using,
wherein obliterating the unreachable object comprises overwriting a memory of the mobile device using the wipe function where the unreachable object is stored.
2. The method of claim 1 , wherein the mobile device is a personal digital assistant.
3. The method of claim 1 , wherein the mobile device is a mobile communication device.
4. The method of claim 1 , wherein the mobile device is a cellular telephone with data messaging capabilities.
5. The method of claim 1 , wherein the mobile device is a wireless two-way communication device.
6. The method of claim 1 , wherein the mobile device is a data messaging device.
7. The method of claim 1 , wherein the mobile device is a two-way pager.
8. The method of claim 1 , wherein the mobile device is a wireless Internet appliance.
9. The method of claim 1 , wherein the wireless network includes means for providing the wireless network.
10. The method of claim 1 , wherein the secure information is an S/MIME encrypted message.
11. The method of claim 10 , wherein the sensitive information is an unencrypted version of the S/MIME message.
12. The method of claim 11 , wherein the secure message was unencrypted by obtaining and applying a private key to the encrypted S/MIME message.
13. The method of claim 1 , wherein the sensitive information arises from use of a Personal Information Management (PIM) application.
14. The method of claim 1 , wherein overwriting the unreachable object includes overwriting the memory location where the unreachable object is stored with a sequence of bits comprising all zeros, all ones, or random data.
15. The method of claim 1 , wherein the object is a user interface object configured to display the sensitive information.
16. A wireless device comprising:
a receiver configured to receive secure information over a wireless network;
a microprocessor coupled to the receiver, the microprocessor configured to extract sensitive information from the secure information;
an addressable memory configured to:
store the sensitive information, and
store an object, wherein the sensitive information is accessible using the object when the object is executed by the microprocessor; and
wherein the microprocessor is further configured to:
initiate a secure garbage collection module to detect that the object is unreachable and call a wipe function;
unreference the object,
determine that the object has become unreachable because the object was unreferenced,
based upon the determination that the object has become unreachable, obliterate the unreachable object from the memory, and
reclaim the portion of the memory that the object was using,
wherein obliterating the unreachable object comprises overwriting the addressable memory location of the unreachable object using the wipe function.
17. The wireless device of claim 16 , wherein the secure information is an S/MIME encrypted message.
18. The wireless device of claim 16 , wherein overwriting the addressable memory location of the unreachable object includes overwriting the memory location with a sequence of bits comprising all zeros, all ones, or random data.
19. The wireless device of claim 16 , wherein the object is a user interface object configured to display the sensitive information.