Mobile Device Data Encryption with Selective Decryption
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Conventional mobile devices lack secure file management, as they often decrypt data without considering its source, leading to unnecessary processing and potential unauthorized access to sensitive enterprise data.
Innovation Solution
A method and system for securing data on mobile communications devices by determining if data is associated with a server, encrypting enterprise data with a device-specific key, and only decrypting it when authorized access is requested by an application or service listed in an access control list.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If data is decrypted without considering its source, then data accessibility is improved, but security against unauthorized access deteriorates
Solution Approach 1:
The patent implements different decryption behaviors based on the data source. Enterprise data from specific servers is decrypted only when requested by authorized applications, while non-enterprise data is handled differently. This local differentiation of decryption policies resolves the contradiction by providing appropriate security levels for different data types while maintaining accessibility where needed.
Solution Approach 2:
The system dynamically determines whether to decrypt data based on runtime conditions including the data source identification, application authorization status, and access control list verification. This dynamic approach allows the system to adapt decryption behavior to current security requirements while maintaining ease of operation for authorized users.
2Ease of operation
If all data is decrypted for access, then data usability is improved, but processing overhead increases
Solution Approach 1:
The patent applies partial decryption by only decrypting enterprise data when specifically requested by authorized applications, rather than decrypting all data universally. This partial action approach reduces unnecessary processing overhead while maintaining data usability for authorized operations, directly resolving the contradiction between usability and energy consumption.
3Reliability
If enterprise data is encrypted with device-specific key, then security is improved, but access control complexity increases
Solution Approach 1:
The patent introduces an access control list as an intermediary mechanism that simplifies the encryption/decryption process. Instead of implementing complex cryptographic protocols for each access request, the system uses the access control list to pre-authorize applications, making the security mechanism more manageable while maintaining strong encryption with device-specific keys.
Data Source
AI summary
A method and system for securing data of a mobile communications device. The method includes: determining that first application data is data associated with a first server; encrypting the first application data with an encryption key stored in the mobile communications device; storing the encrypted first application data on a memory; receiving a request to access the first application data from an application or a service implemented from the mobile communications device; determining that the application or service is authorized to access the first application data; and in response to said determining, decrypting the first application data with the encryption key.