Offline data delete with false trigger protection

摘要

Systems and methods for protecting data stored on an electronic device from access by an illegitimate user are presented. The data is protected by activating an offline data delete module installed in the electronic device to conditionally delete the data according to the following criteria: after establishing a first communication between an agent installed in the electronic device and a remote server, obtaining a password from a user if a second communication is not established between the agent and the remote server within a predetermined period of time. After obtaining a password from the user, deleting at least some data stored on the electronic device after a second communication is not established between the agent and the remote server within the predetermined period of time and a predetermined number of incorrect passwords has been obtained.

主权项

1. A method for protecting data stored on an electronic device from access by an illegitimate user, the method comprising:
establishing a first communication between an agent installed in the electronic device and a remote server; subsequently, determining that a second communication has not been established between the agent and the remote server within a predetermined period of time for establishing a communication between the agent and the remote server; in response to determining that the second communication has not been established within the predetermined period of time, displaying a password prompt; waiting until entry of a password by a user in response to the password prompt; detecting said entry of the password; and subsequently, processing the entry of the password by a process that comprises:
if the password is valid, setting a timer to measure a further predetermined period of time for establishing the second communication between the agent and the remote server;if the password is not valid, determining whether a threshold number of invalid password entry attempts have occurred in response to the password prompt, the threshold being greater than one; andif the threshold number of invalid password entry attempts is reached, executing a data protection policy that causes data on the electronic device to be protected, wherein the data protection policy is executed only if the threshold number of invalid password entry attempts is reached, after and not during said waiting.