Intelligent Deletion of Revoked Data

摘要

A program on a device communicates with services of an organization and obtains data associated with the organization (also referred to as organization data). The organization data is optionally encrypted using one or more encryption keys, in which case the program has access to one or more decryption keys allowing the organization data to be decrypted and used at the device. Situations can arise in which the organization data stored on the device is to no longer be accessible to a user and/or the device, which is also referred to as the data being revoked. In response to organization data being revoked at the device, various techniques are used to intelligently delete the data, which refers to determining, based on the revocation that occurred and the nature of the data on the device, which data on the device is to be deleted from the device.

主权项

1. A method implemented in a computing device, the method comprising:
determining whether access to first organization data on the computing device has been revoked, the first organization data comprising data that is associated with an organization; selecting, in response to the access being revoked and based at least on a nature of the first organization data, second organization data on the computing device, the second organization data comprising a subset of the first organization data; and deleting the second organization data from the computing device.