Concord: A Secure Mobile Data Authorization Framework for Regulatory Compliance

With the increasing adoption of mobile computing devices that carry confidential data, organizations need to secure data in an ever-changing environment. Critical organizational data should be protected from a) a disgruntled user's access and b) a theft or loss of the mobile device. When such compromises do occur, future data access should be immediately revoked and the knowledge of the data that might have been exposed be identified. Such assessment enables an organization to demonstrate its adherence to mandated regulatory compliance. We propose Concord: a framework that provides an organizational service that allows an organization to monitor data that has been accessed on its users' mobile devices. Concord distributes trust among multiple entities so as to enable data access following their successful interaction. Firstly, to enable data access, users of the mobile device require the organization's involvement to access the data on the mobile devices. Likewise, in t...

• Type: Conference
• Year: 2008
• Where: LISA
• Authors: Gautam Singaraju, Brent Hoon Kang
• Keywords: Data Access, Enable Data Access, LISA 2008, Mobile Device, Operating System