Patent ID: 8205091

Claim:
A method for handling secure data stored on a device, wherein the device is configurable to communicate over a data channel with an external security information source associated with a user of the device, said method comprising: receiving at the device, from a rules database, secure data for a specific recipient, the secure data having been encrypted at the rules database using an encryption key, wherein recipient user identification information associated with the specific recipient is stored on an external security information source, and the rules database contains a copy of the recipient user identification information; upon receiving a request to access the secure data on the device, obtaining external user identification information from the external security information source, wherein the external security information source has a location proximate to the device; obtaining at the device, a public key for the secure data from the rules database, wherein the public key is generated based on the copy of the recipient user identification information and the encryption key; generating a decryption key at the device using the public key and the external user identification information; decrypting at the device, the secure data using the decryption key; and wherein the secure data is accessible when the external user identification information matches the recipient user identification information.