Secure copy and paste of mobile app data
Secure transfer of mobile application content is disclosed. A state-related event associated with a managed application in a managed set of applications may be detected. It may be determined that content from the managed application is stored at a public storage location on a mobile device. At least a portion of the content may be transferred to a secure storage location accessible to the managed set.
1. A method, comprising:
detecting a state-related event affecting accessibility of content from a managed application included in a set of a managed applications;
in response to detecting the state-related event, determining whether the content is stored at a public storage location on a mobile device;
at least partially in response to the detected state-related event and to determining that the content is stored at the public storage location on the mobile device, securing the content, wherein the securing of the content includes transferring the content to a secure storage location on the mobile device, and wherein the secure storage location is accessible to the set of managed applications and is not accessible to applications not included in the set of managed applications;
receiving, in a context of a second managed application, a content paste command;
retrieving, based at least in part on the content paste command, the content from the public storage location, wherein the content was moved from the secure storage location to the public storage location; and
providing access to the content in the context of the second managed application.
2. The method of claim 1 , wherein the securing of the content includes:
encrypting the content.
3. The method of claim 1 , further comprising:
detecting, at a second managed application, a second state-related event;
determining that the content is stored at the secure storage location; and
transferring the content from the secure storage location to the public storage location.
4. The method of claim 1 , further comprising:
detecting, in a context of the managed application, a second state-related event;
determining that the content is stored at the secure storage location; and
transferring the content from the secure storage location to the public storage location.
5. The method of claim 1 , further comprising providing notification information associated with the content to the public storage location that is accessible to one or more applications not included in the set of managed applications.
6. The method of claim 5 , further comprising:
receiving, in a context of a non-managed application, a content paste indication;
retrieving the notification information from the public storage location; and
providing, in the context of the non-managed application, a display including at least a portion of the notification information.
7. The method of claim 1 , wherein the public storage location is accessible to at least one application not included in the set of managed applications.
8. The method of claim 1 , wherein the securing of the content comprises:
generating secured content based at least in part on the content stored at the public storage location; and
replacing the content stored at the public storage location with the secured content.
9. The method of claim 1 , wherein one or more of the detecting, determining and securing steps are performed by one or more of a library associated with the managed application, the managed application, and a management agent.
10. The method of claim 1 , wherein the determining of whether the content is stored at the public storage location includes:
determining, at least in part in response to the detected state-related event, that the content is stored at the public storage location.
11. The method of claim 1 , further comprising:
receiving, in a context of the managed application, a content transfer indication associated with the content; and
providing, based at least in part on the content transfer indication, the content to the public storage location, such that the content provided to the public location is accessible to at least one application that is not included in the set of managed applications.
12. The method of claim 11 , further comprising removing the content from the context of the managed application.
13. The method of claim 1 , wherein the state-related event includes a transition of the managed application from an active state to an inactive state in conjunction with a transition of an application not included in the managed set from an inactive state to an active state.
14. The method of claim 1 , wherein after the content is secured, the secured content is not accessible to an application not included in the set of managed applications.
15. A system, comprising:
a processor; and
a memory coupled with the processor, wherein the memory is configured to provide the processor with instructions which when executed cause the processor to:
detect a state-related event affecting accessible of content from a managed application included in a set of managed applications;
in response to detecting the state-related event, determine whether the content is stored at a public storage location on a mobile device;
at least partially in response to the detected state-related event and to determining that the content is stored at the public storage location on the mobile device, securing the content, wherein the securing of the content includes transferring the content to a secure storage location on the mobile device, and wherein the secure storage location is accessible to the set of managed applications and is not accessible to applications not included in the set of managed applications;
receive, in a context of a second managed application, a content paste command;
retrieve, based at least in part on the content paste command, the content from the public storage location, wherein the content was moved from the secure storage location to the public storage location; and
provide access to the content in the context of the second managed application.
16. The system of claim 15 , wherein the processor is configured to secure the content at least in part by:
encrypting the content.
17. The system of claim 15 , wherein the memory is further configured to provide the processor with instructions which when executed cause the processor to:
detect, at a second managed application, a second state-related event;
determine that the content is stored at the secure storage location; and
transfer the content from the secure storage location to the public storage location.
18. The system of claim 15 , wherein the memory is further configured to provide the processor with instructions which when executed cause the processor to:
detect, in a context of the managed application, a second state-related event;
determine that the content is stored at the secure storage location; and
transfer the content from the secure storage location to the public storage location.
19. The system of claim 15 , wherein the state-related event includes a transition of the managed application from an active state to an inactive state in conjunction with a transition of an application not included in the managed set from an inactive state to an active state.
20. A computer program product, the computer program product being embodied in a tangible non-transitory computer readable storage medium and comprising computer instructions for:
detecting a state-related event affecting an accessibility of content from a managed application in a set of managed applications;
in response to detecting the state-related event, determining whether the content is stored at a public storage location on a mobile device;
at least partially in response to the detected state-related event and to determining that the content is stored at the public storage location on the mobile device, securing the content, wherein the securing of the content includes transferring the content to a secure storage location on the mobile device, and wherein the secure storage location is accessible to the set of managed applications and is not accessible to applications not included in the set of managed applications;
receiving, in a context of a second managed application, a content paste command;
retrieving, based at least in part on the content paste command, the content from the public storage location, wherein the content was moved from the secure storage location to the public storage location; and
providing access to the content in the context of the second managed application.
21. The computer program product recited in claim 20 , further comprising computer instructions for:
encrypting the content.