公开(公告)号：EP3000071A1

公开(公告)日：2016-03-30

申请号：EP13771330.1

申请日：2013-09-20

申请人： Microsoft Technology Licensing, LLC

发明人： ADAM, Preston, Derek ,  NOVOTNEY, Peter, J. ,  IDE, Nathan, J. ,  BASMOV, Innokentiy ,  ACHARYA, Narendra, S. ,  URECHE, Octavian, T. ,  SINHA, Saurav ,  KANNAN, Gopinathan ,  MACAULAY, Christopher, R. ,  GRASS, Michael J.

IPC分类号： G06F21/62 ,  H04W12/02

CPC分类号： G06F21/6218 ,  G06F2221/2143 ,  H04L63/0428

摘要： An application on a device can communicate with organization services. The application accesses a protection system on the device, which encrypts data obtained by the application from an organization service using an encryption key, and includes with the data an indication of a decryption key usable to decrypt the encrypted data. The protection system maintains a record of the encryption and decryption keys associated with the organization. The data can be stored in various locations on at least the device, and can be read by various applications on at least the device. If the organization determines that data of the organization stored on a device is to no longer be accessible on the device (e.g., is to be revoked from the device), a command is communicated to the device to revoke data associated with the organization. In response to this command, the protection system deletes the decryption key.