FileMaker Go Phone Home

If FileMaker Go is running on a device is lost or stolen, what steps can be taken to protect the data contained in the application, and how will the application become aware that it has been lost or stolen?

Transcript

1. Phoning Home What should FileMaker Go applications do when the device is lost or stolen? dotfmp Berlin 2017
2. Lost Device Considerations • HIPAA/GDPR Requirements • Sensitivity of the data • Business disruption if data is deleted • Network availability - what should happen if the application can’t access the network. What does it mean?
3. What Does Apple Offer? • If Find My iPhone is Enabled • Geographic tracking/mapping • Play a sound so you can hear it if it’s nearby • Lost Mode • Remote device locking • Custom message with phone number • Disable Apple Pay • Erase the device - no longer trackable via Find My iPhone • If Find My iPhone is NOT Enabled • Need to manually change passwords for Apple ID, other internet accounts (mail, etc.)
4. What Should FileMaker Go Do? • If data is confidential, delete data • Disable application functionality • If it’s online, attempt to communicate location information - Latitude/Longitude, IP Address
5. Required Mechanisms • Startup script that checks in with server to check status • Restrict functionality if it can’t access network? • If status is lost/stolen: • Delete all data • Set ‘Lost’ flag so that it ‘knows’ it’s lost on subsequent restarts • Attempt to communicate its location to the server • Exit application
6. Other Safeguards • Export, printing, save as PDF - disabled • Data is encrypted • [Full Access] has been removed
7. Group Consensus Best Practice • Use XML (over SSL/TLS) since it’s lightweight and fast, and use POST instead of GET • Leverage the new geofencing capabilities so that when the device is outside of its normal operating area, the following actions occur: • User is prompted to re-authenticate • If authentication fails, either encrypt all data, sending new, unsynchronized data to server, and disable application OR • If medical or personally identifying data is on the device, destroy the data and disable the application. • Encryption: generate the key on the server and have the device retrieve it on check in. If encryption is required, use the retrieved key, then delete it so that if the application is forced open and the logic inspected, the key can’t be discovered.