Processing data on an electronic device

1. A method of processing data on an electronic device, the method comprising steps of:

establishing a shared encryption key with a first software application instance running on a second electronic device;

receiving a ‘begin session’ command sent by the first software application instance and responsive to the ‘begin session’ command:

creating a storage location in a data store of the electronic device; and

obtaining a data encryption key;

receiving data;

encrypting the data using the data encryption key and storing the encrypted data in the storage location;

receiving an ‘end session’ command sent by the first software application instance and responsive to the ‘end session’ command:

discarding the shared encryption key; and

deleting the encrypted data from the storage location.

2. The method according to claim 1 , further comprising steps of:

receiving a data request sent by the first software application instance;

decrypting the stored data using the data encryption key;

encrypting the data using the shared encryption key; and

sending the data encrypted using the shared encryption key to the first software application instance.

3. The method according to claim 1 , further comprising steps of:

establishing a second shared encryption key with a second software application instance;

creating a file containing the data encryption key;

encrypting the file using the second shared encryption key; and

storing the encrypted file in the data store.

4. The method according to claim 3 , wherein the second software application instance runs on the second electronic device or a third electronic device.

5. The method according to claim 1 , wherein said data is received from an application running on the electronic device or is received from an application running on a fourth electronic device communicatively connected to the first electronic device.

6. A method of controlling processing of data on an electronic device, the method comprising steps of:

establishing a shared encryption key with the electronic device;

sending a ‘begin session’ command to the electronic device, to cause the electronic device to create a storage location in a data store of the electronic device and obtain a data encryption key; and

sending an ‘end session’ command to the electronic device, to cause the electronic device to discard the shared encryption key and delete the encrypted data from the storage location.

7. The method according to claim 6 , further comprising steps of:

sending a data request to the electronic device;

receiving encrypted data from the electronic device; and

decrypting the encrypted data using the shared encryption key.

8. The method according to claim 6 , wherein the steps are performed by a first software application instance running on a second electronic device, and further comprising a second application instance performing steps of:

establishing a second shared encryption key with the electronic device; and

using the second shared encryption key to obtain access to a data encryption key on the electronic device.

9. The method according to claim 8 , wherein the second application instance runs on the second electronic device or a third electronic device.

10. The method according to claim 6 , wherein the electronic device is an Internet of Things device.

11. An electronic device comprising:

a memory; and

at least one hardware processor communicatively coupled with the memory and configured to:

establish a shared encryption key with a first software application instance running on a second electronic device;

receive a ‘begin session’ command sent by the first software application instance and responsive to the ‘begin session’ command:

create a storage location in a data store of the electronic device; and

obtain a data encryption key;

receive data;

encrypt the data using the data encryption key and store the encrypted data in the storage location;

receive an ‘end session’ command sent by the first software application instance and responsive to the ‘end session’ command:

discard the shared encryption key; and

delete the encrypted data from the storage location.

12. The device according to claim 11 , further configured to:

receive a data request sent by the first software application instance;

decrypt the stored data using the data encryption key;

encrypt the data using the shared encryption key; and

send the data encrypted using the shared encryption key to the first software application instance.

13. The device according to claim 11 , further configured to:

establish a second shared encryption key with a second software application instance;

create a file containing the data encryption key;

encrypt the file using the second shared encryption key; and

store the encrypted file in the data store.

14. The device according to claim 13 , wherein the second software application instance runs on the second electronic device or a third electronic device.

15. The device according to claim 11 , wherein said data is received from an application running on the electronic device or is received from an application running on a fourth electronic device communicatively connected to the first electronic device.

16. A non-transitory computer-readable storage medium having stored thereon, computer program which when executed by at least one processor of an electronic device is configured to

establish a shared encryption key with a first software application instance running on a second electronic device;

receive a ‘begin session’ command sent by the first software application instance and responsive to the ‘begin session’ command:

create a storage location in a data store of the electronic device; and

obtain a data encryption key;

receive data;

encrypt the data using the data encryption key and store the encrypted data in the storage location;

receive an ‘end session’ command sent by the first software application instance and responsive to the ‘end session’ command:

discard the shared encryption key; and

delete the encrypted data from the storage location.