INTELLIGENT DELETION OF REVOKED DATA

A program on a device communicates with services of an organization and obtains data associated with the organization (also referred to as organization data). The organization data is optionally encrypted using one or more encryption keys, in which case the program has access to one or more decryption keys allowing the organization data to be decrypted and used at the device. Situations can arisein which the organization data stored on the device is to no longer be accessible to a user and/or the device, which is also referred to as the data being revoked. In response to organization data being revoked at the device, various techniques are used to intelligently delete the data, which refers to determining, based on the revocation that occurred and the nature of the data on the device, which data on the device is to be deleted from the device. 设备上的程序与组织的服务通信并获得与该组织相关联的数据(也称为组织数据)。组织数据可选地使用个或多个加密密钥来加密，在这种情况下程序能够访问个或多个解密密钥，从而允许组织数据在该设备处被解密和使用。可存在其中存储在设备上的组织数据不再能够被用户和/或该设备访问的情况，这也被称为该数据被撤销。响应于组织数据在设备处被撤销，使用各种技术来智