Content protection ticket system and method

Abstract

Systems and methods for providing access to data. When an application needs to perform an action that requires access to data, the application acquires a “ticket” in order to access the data. While the application holds the ticket, it is given access to the data.

1 . A method of regulating access to sensitive data on a device, comprising the steps of: 
 requesting a ticket to obtain access to data stored on the device;    receiving a ticket from the device;    using the received ticket to access data stored on the device; and    allowing applications to complete the actions they are in the process of performing, and allowing them to notify the device's operating system that they have finished their actions so that the device can enter a locked state.    
   
   
       2 . The method of  claim 1 , wherein the data is sensitive data which is stored on the device.  
   
   
       3 . The method of  claim 2 , wherein the sensitive data is at least data selected from the group containing e-mail message content, contact names and e-mail addresses, or times and locations of meetings.  
   
   
       4 . The method of  claim 1 , wherein the data comprises encrypted data.  
   
   
       5 . The method of  claim 4 , further comprising the step of decrypting the encrypted data responsive to receiving the ticket.  
   
   
       6 . The method of  claim 5 , further comprising the step of receiving a request to release the ticket.  
   
   
       7 . The method of  claim 6 , further comprising the step of releasing the ticket, thereby allowing the device to enter a locked state.  
   
   
       8 . The method of  claim 7 , wherein the encrypted content is no longer accessible by a requestor after the ticket has been released.  
   
   
       9 . The method of  claim 1 , wherein the requestor is an application executing on the device.  
   
   
       10 . The method of  claim 9 , further comprising the step of receiving a denial of the ticket request when the device is in a locked state.  
   
   
       11 . The method of  claim 10 , further comprising the step of blocking the application from executing while the device is in the locked state.  
   
   
       12 . The method of  claim 11 , further comprising the step of continuing the execution of the application when the device is unlocked.  
   
   
       13 . The method of  claim 1 , further comprising receiving notification that the device processor is entering a locked state prior to requesting a ticket from the device processor.  
   
   
       14 . The method of  claim 1 , wherein the device is a wireless mobile communication device.  
   
   
       15 . Computer software stored on one or more computer readable media, the computer software comprising program code for carrying out a method according to  claim 1 .  
   
   
       16 . A method of regulating access to sensitive data on a device, comprising the steps of: 
 requesting a ticket to obtain access to data stored on the device;    receiving a ticket from the device;    using the received ticket to access data stored on the device; and    receiving a request to release the ticket.    
   
   
       17 . The method of  claim 16 , further comprising the step of releasing the ticket, thereby allowing the device to enter a locked state.  
   
   
       18 . The method of  claim 17 , wherein the sensitive data is no longer accessible by a requestor after the ticket has been released.  
   
   
       19 . The method of  claim 16 , wherein the data comprises encrypted data.  
   
   
       20 . The method of  claim 19 , further comprising the step of decrypting the encrypted data responsive to receiving the ticket.  
   
   
       21 . A system for regulating access to sensitive data on a device, comprising: 
 processor instructions for requesting a ticket to obtain access to data stored on the device;    processor instructions for receiving a ticket from the device;    processor instructions for using the received ticket to access data stored on the device; and    processor instructions for allowing applications to complete the actions they are in the process of performing, and allowing them to notify the device's operating system that they have finished their actions so that the device can enter a locked state.