Patent ID: 9552491
Date: 2017-01-24
CPC Classifications: G06F,H04L

Claim:
1. A method for securing data on a managed device, the method being performed by an administrative system that is connected to a managed device over a network, comprising: detecting, by the administrative system, an event related to the managed device that triggers application of a secure configuration, wherein the event comprises determining that a user of the managed device is an employee whose employment has been or will be terminated; in response to detecting the event, searching the data on the managed device and determining whether the data is sensitive without any prior knowledge of the data and dynamically creating, by the administrative system, the secure configuration based on the event; wherein the secure configuration, when applied, disables functionality of the managed device that compromises sensitive data but does not prevent all user access to the managed device, wherein the secure configuration, when applied, restricts functionality of the managed device to read-only while allowing writes initiated by an operating system to a memory page file, wherein the functionality of the managed device that is disabled by the secure configuration comprises formatting a disk, encrypting the disk, copying files via system ports, and taking screenshots; deploying, by the administrative system, the secure configuration to the managed device; causing, by the administrative system, the secure configuration to be applied to the managed device; in response to the secure configuration being applied to the managed device, receiving by the administrative system, a status message from the managed device indicating that the managed device is in a secure mode that allows the user of the managed device to at least view files on the managed device; and wherein the administrative system waits to detect an event that indicates that the secure configuration is no longer necessary, causing the secure configuration to be released from the managed device and the managed device to send to the administrative system a normal status message.