Method and system for remote data access using a mobile device

• US 10,045,215 B2
• Filed: 03/31/2017
• Issued: 08/07/2018
• Est. Priority Date: 05/16/2008
• Status: Active Grant

• Current Assignee: Quick Vault, Inc. (d/b/a CloudVault)
• Original Assignee: Quick Vault, Inc. (d/b/a CloudVault)
• Inventors: Bacastow, Steven V.
• Primary Examiner(s): Herzog, Madhuri
• Application Number:
  US15/476,556
• Publication Number:
  US 20170208467A1
• Time in Patent Office: 494 Days
• CPC Class Codes: G06F 11/1458 Management of the backup or restore process
• CPC Class Codes: G06F 21/121 Restricting unauthorised execution of programs
• CPC Class Codes: G06F 21/305 by remotely controlling device operation
• CPC Class Codes: G06F 21/606 by securing the transmission between two devices or processes
• CPC Class Codes: G06F 21/62 Protecting access to data via a platform, e.g. using keys or access control rules
• CPC Class Codes: G06F 21/6218 to a system of files or objects, e.g. local or distributed file system or database
• CPC Class Codes: G06F 21/6245 Protecting personal data, e.g. for financial or medical purposes
• CPC Class Codes: G06F 21/78 to assure secure storage of data address-based protection against unauthorised use of memory G06F12/14; record carriers for use with machines and with at least a part designed to carry digital markings G06K19/00
• CPC Class Codes: H04L 63/0435 wherein the sending and receiving network entities apply symmetric encryption, i.e. same key used for encryption and decryption cryptographic mechanisms or cryptographic arrangements for symmetric key encryption H04L9/06
• CPC Class Codes: H04L 63/0492 by using a location-limited connection, e.g. near-field communication or limited proximity of entities
• CPC Class Codes: H04L 63/083 using passwords cryptographic mechanisms or cryptographic arrangements for entity authentication using a predetermined code H04L9/3226
• CPC Class Codes: H04L 63/0876 based on the identity of the terminal or configuration, e.g. MAC address, hardware or software configuration or device fingerprint
• CPC Class Codes: H04L 63/10 for controlling access to devices or network resources
• CPC Class Codes: H04L 63/102 Entity profiles
• CPC Class Codes: H04L 63/107 wherein the security policies are location-dependent, e.g. entities privileges depend on current location or allowing specific operations only from locally connected terminals
• CPC Class Codes: H04L 63/12 Applying verification of the received information cryptographic mechanisms or cryptographic arrangements for data integrity or data verification H04L9/32
• CPC Class Codes: H04L 63/20 for managing network security; network security policies in general filtering policies H04L63/0227
• CPC Class Codes: H04L 67/04 specially adapted for terminals or networks with limited capabilities; specially adapted for terminal portability
• CPC Class Codes: H04L 67/535 Tracking the activity of the user network monitoring arrangements H04L43/00; recording of computer activity G06F11/34
• CPC Class Codes: H04W 12/0431 Key distribution or pre-distribution; Key agreement
• CPC Class Codes: H04W 12/06 : Authentication
• CPC Class Codes: H04W 12/08 : Access security
• CPC Class Codes: H04W 4/80 : Services using short range communication, e.g. near-field communication [NFC], radio-frequency identification [RFID] or low energy communication

Abstract

A system and method for securely storing, retrieving and sharing data using PCs and mobile devices and for controlling and tracking the movement of data to and from a variety of computing and storage devices.

Claims

1. A computer-implemented method for remote data access, comprising the steps of:

a remote computer receiving from a first mobile device a first authentication request comprising a first mobile device unique identifier and a first software identifier, the first software identifier comprising a first software license key associated with a first software stored on the first mobile device, wherein the first authentication request is initiated by the first software;

the remote computer determining whether the first mobile device is authorized for use with the remote computer by determining a valid combination of the first mobile device unique identifier and the first software identifier, the remote computer comprising a plurality of security settings, each of the security settings associated with a single mobile device and comprising a unique combination of a mobile device unique identifier and a software identifier;

upon determining that the first mobile device is authorized, the remote computer transmitting to the first mobile device a validation message associated with the first mobile device;

the remote computer receiving from the first mobile device a first file copied from the first mobile device, the first file encrypted by an encryption key that is uniquely related to the first software stored on the first mobile device;

the remote computer receiving a first detail message from the first mobile device, the first detail message associated with the first file copied from the first mobile device to the remote computer, the first detail message comprising at least a name of the first file copied from the first mobile device to the remote computer, the first detail message stored as a meta-data log on the remote computer;

in response to receiving a share request from the first mobile device, the remote computer transmitting to a second mobile device a message including a link to the first file copied from the first mobile device;

the remote computer receiving from the second mobile device a second authentication request comprising a second mobile device unique identifier and a second unique user name and a second password associated with the second mobile device;

the remote computer determining whether the second mobile device is authorized for use with the remote computer by determining a valid combination of the second mobile device unique identifier and the second unique user name and the second password;

upon determining that the second mobile device is authorized, the remote computer transmitting to the second mobile device a copy of the first file copied from the first mobile device to the remote computer; and

the remote computer storing in the as a meta-data log a second detail message associated with the copy of the first file transmitted from the remote computer to the second mobile device.

2. The computer-implemented method of claim 1, wherein a first unique user name and a first password are authenticated to authorize transfer of files to and from the remote computer and the first mobile device.

3. The computer-implemented method of claim 1, wherein the first file is decrypted by the remote computer prior to transmission to the second mobile device, the first file decrypted using the encryption key that is uniquely related to the first software stored on the first mobile device.

4. The computer-implemented method of claim 1, wherein the second unique user name and the second password are authorized for use with the second mobile device to transfer files from the remote computer by retrieving the security settings associated with the second mobile device unique identifier.

5. The computer-implemented method of claim 1, wherein the first detail message further comprises at least one of:

a file type, a date created, a date transferred, and a volume.

6. The computer-implemented method of claim 1, wherein the first mobile device comprises a processor, an operating system, a non-volatile flash memory, and a wireless antenna for communicating with the remote computer.

7. The computer-implemented method of claim 1, wherein the second mobile device comprises a processor, an operating system, a non-volatile flash memory, and a wireless antenna for communicating with the remote computer.

8. A computer-implemented method for remote data access comprising the steps of:

a remote computer receiving from a first mobile device a first authentication request comprising a first mobile device unique identifier and a first software identifier, the first software identifier comprising a first software license key associated with a first software stored on the first mobile device, wherein the first authentication request is initiated by the first software;

the remote computer determining whether the first mobile device is authorized for use with the remote computer by determining a valid combination of the first mobile device unique identifier and the first software identifier, the remote computer comprising a plurality of security settings, each of the security settings associated with a single mobile device and comprising a unique combination of a mobile device unique identifier and a software identifier;

upon determining that the first mobile device is authorized, the remote computer transmitting to the first mobile device a validation message associated with the first mobile device;

the remote computer receiving from the first mobile device a first file copied from the first mobile device, the first file encrypted by an encryption key that is uniquely related to the first software stored on the first mobile device; and

the remote computer receiving a detail message from the first mobile device, the detail message associated with the first file copied from the first mobile device to the remote computer, the detail message comprising at least a name of the first file copied from the first mobile device to the remote computer, the detail message stored as a meta-data log on the remote computer.

9. The computer-implemented method of claim 8, wherein a first unique user name and a first password are authenticated to authorize transfer of files to and from the remote computer and the first mobile device.

10. The computer-implemented method of claim 8, wherein the detail message further comprises at least one of:

a file type, a date created, a date transferred, and a volume.

11. The computer-implemented method of claim 8, wherein the first mobile device comprises a processor, an operating system, a non-volatile flash memory, and a wireless antenna for communicating with the remote computer.

12. A computer-implemented method for remote data access, comprising the steps of:

a remote computer receiving from a second mobile device a second authentication request comprising a second mobile device unique identifier and a second unique user name and a second password associated with the second mobile device, the second authentication request received from the second mobile device responsive to a message received by the second mobile device from the remote computer including a link to a first file authorized by a first mobile device to be downloaded to the second mobile device, the first file being encrypted;

the remote computer determining whether the second mobile device is authorized for use with the remote computer by determining a valid combination of the second mobile device unique identifier and the second unique user name and the second password, the remote computer comprising a plurality of security settings, each of the security settings associated with a single mobile device and comprising a unique combination of a mobile device unique identifier, a unique user name, and a password;

upon determining that the second mobile device is authorized, the remote computer transmitting to the second mobile device a copy of the first file copied from the first mobile device to the remote computer, the first file decrypted by an encryption key that is uniquely related to a first software stored on the first mobile device; and

the remote computer storing in a meta-data log a detail message associated with the copy of the first file transmitted from the remote computer to the second mobile device.

13. The computer-implemented method of claim 12, wherein the detail message comprises at least one of:

a name of the first file, a file type, a date created, a date transferred, and a volume.

14. The computer-implemented method of claim 12, wherein the second mobile device comprises a processor, an operating system, a non-volatile flash memory, and a wireless antenna for communicating with the remote computer.