问题描述
我正在开发一个企业应用程序，客户端需要从设备远程擦除应用程序存储的所有数据。也就是说，在用户报告丢失的设备的情况下。
I am working on an enterprise application, where the client has the requirement of wiping all the data stored by the application, from the device, remotely. That is, in the case when a user reports a lost device.
如果我们忘记了它的服务端实现，甚至可以远程擦除存储在应用程序沙箱中的数据。删除应用程序资源中存在的文件如sqllite文件和证书怎么样？
If we forget about the service side implementation of it, is it even possible to do a remote wipe of data stored in application sandbox. What about deleting files present in the application resources like sqllite files and certificates?
我正在浏览网络并且出现声称在其产品中这样做。
I was browsing the net for it and came along this site which claims to do so in their product.
如果可以，我们应该如何处理这个问题呢？
If it can be done, how should we approach this problem?
Apple在iOS 4.2中使用移动设备添加了远程擦除功能。我不认为他们通过远程通知这样做。在这种情况下，没有任何确定的镜头保证，数据将从设备中删除。
Remote wipe feature has been added by Apple in iOS 4.2 onwards using mobile me. I don't think they are doing this through remote notifications. In that case there wouldn't be any sure shot guarantee, that the data is deleted from the device.
推荐答案
最佳方式将加密iPhone磁盘上的数据，并仅在内存中解密（因为iOS 4内置了类似的机制）。
在让用户使用数据之前，你问服务器是否允许iPhone加密数据（更好的方法是服务器给iPhone提供解密数据的密钥，所以攻击者赢了在代码中找不到它。如果服务器拒绝请求，应用程序将擦除所有存储的数据，您就完成了。
The best way would be to encrypt the data on the iPhones disk and only decrypt it in memory (since iOS 4 there is a similar mechanism built in).Before you let the user use the data, you ask a server if the iPhone is allowed to encrypt the data (a even better approach would be that the server gives the iPhone the key to decrypt the data, so a attacker won't find it in code). If the server denies the request, the App wipes all the stored data and you are done.
这当然只适用于允许您的应用程序需要互联网连接的情况（或至少与本地内联网的连接，它可以与服务器通信）
This of course only works when your app is allowed to require a internet connection (or at least a connection to the local intranet where it can communicate with the server)
这篇关于在iOS中远程擦除应用程序数据的文章就介绍到这了，希望我们推荐的答案对大家有所帮助，也希望大家多多支持！