System and method to provide server control for access to mobile client data

摘要

Systems and methods for protecting a data item include, upon initiation of transfer of the data item from a server to a client device, determining a sensitivity score and a current protection level of the data item. A policy is applied to determine an appropriate protection for the data item based upon the sensitivity score and the current protection level. A protected data item is provided to the client device by applying the appropriate protection to the data item.

主权项

1. A system for protecting a data item, comprising:
a hardware processor; a sensitivity determination module configured to determine a sensitivity score of the data item and a current protection level of the data item upon initiation of transfer of the data item from a server to a client device; a policy decision module configured to apply a policy, using the processor, to determine an appropriate protection for the data item based upon the sensitivity score, the current protection level, and features of the client device, wherein the features of the client device include one or more of a history of compromises, an ownership status, an operating system, a version of the operating system, applications stored on the client device, a patch status, suspected malware, a status of a network connected to the client device, and an application of the client device used to access the data item; and a secure migration manager module configured to provide a protected data item to the client device by applying the appropriate protection to one or more data items, wherein a unique encryption key is employed for each application of a protection technique on each of the one or more data items.