Method and apparatus for providing subscriber identity module-based data encryption and remote management of portable storage devices

• US 10,162,959 B2
• Filed: 05/08/2017
• Issued: 12/25/2018
• Est. Priority Date: 10/15/2012
• Status: Active Grant

• Current Assignee: AT&T Intellectual Property I LP (AT&T, Inc.)
• Original Assignee: AT&T Intellectual Property I LP (AT&T, Inc.)
• Inventors: Wang, Wei, Istomin, Mikhail
• Primary Examiner(s): Smithers, Matthew
• Application Number:
  US15/589,505
• Publication Number:
  US 20170245150A1
• Time in Patent Office: 596 Days
• CPC Class Codes: G06F 21/32 using biometric data, e.g. fingerprints, iris scans or voiceprints
• CPC Class Codes: G06F 21/44 Program or device authentication
• CPC Class Codes: G06F 21/79 in semiconductor storage media, e.g. directly-addressable memories
• CPC Class Codes: H04L 63/0876 based on the identity of the terminal or configuration, e.g. MAC address, hardware or software configuration or device fingerprint
• CPC Class Codes: H04L 63/102 Entity profiles
• CPC Class Codes: H04W 12/06 Authentication
• CPC Class Codes: H04W 12/08 Access security
• CPC Class Codes: H04W 12/082 using revocation of authorisation
• CPC Class Codes: H04W 52/0261 managing power supply demand, e.g. depending on battery level
• CPC Class Codes: H04W 88/02 Terminal devices
• CPC Class Codes: Y02D 30/70 in wireless communication networks

Abstract

Portable storage devices and methods for remotely managing such portable storage devices are disclosed. For example, a method receives a request from an endpoint device to send a command to a portable storage device. The method then authenticates the endpoint device that has sent the request. The method then transmits the command wirelessly to the portable storage device. Similarly, a portable storage device includes a processor and a computer-readable medium in communication with the processor, the computer-readable medium to store instructions. The instructions, when executed by the processor, cause the processor to perform operations that include: wirelessly receiving a command related to an access of a memory of the portable storage device, verifying an authenticity of the command and executing the command when the authenticity of the command is verified.

Claims

1. A method for remotely managing a portable storage device, the method comprising:

receiving, by a processor, a request from an endpoint device to send a command to the portable storage device;

authenticating, by the processor, the endpoint device that has sent the request; and

transmitting, by the processor, the command to the portable storage device, wherein the command is transmitted wirelessly, wherein the command comprises an unlock command for unlocking the portable storage device, wherein the portable storage device is a subscriber identity module card.

2. The method of claim 1, wherein the unlock command comprises a command that causes the portable storage device to be unlocked for a predefined period of time.

3. The method of claim 1, wherein the unlock command comprises a command that causes the portable storage device to be unlocked until the portable storage device is disconnected from a device used to access a memory of the portable storage device.

4. The method of claim 1, wherein the command further comprises an erase command for erasing a memory of the portable storage device.

5. The method of claim 4, wherein the erase command comprises a command that causes the memory of the portable storage device to be destroyed.

6. The method of claim 4, wherein the erasing the memory is to be performed when the portable storage device is connected to a power source.

7. The method of claim 1, wherein the command is transmitted wirelessly to the portable storage device via a cellular network.

8. The method of claim 1, wherein the command is transmitted wirelessly to the portable storage device via a near-field communication.

9. The method of claim 8, wherein the transmitting the command to the portable storage device comprises sending the command and an access code to a user device for forwarding to the portable storage device via the near-field communication.

10. A portable storage device, comprising:

a processor; and

a computer-readable medium storing a plurality of instructions which, when executed by the processor, cause the processor to perform operations, the operations comprising;

receiving a command related to an access of a memory of the portable storage device, wherein the command is received wirelessly, wherein the command comprises an unlock command for unlocking the portable storage device, wherein the portable storage device is a subscriber identity module card;

verifying an authenticity of the command; and

executing the command when the authenticity of the command is verified.

11. The portable storage device of claim 10, wherein the operations further comprise:

activating a switch to allow a current to flow from a power source to a unit for storing a cryptographic key of the portable storage device when a valid authorization code is received along with the command.

12. The portable storage device of claim 11, wherein the operations further comprise:

decrypting data stored in the memory of the portable storage device using the cryptographic key.

13. The portable storage device of claim 11, wherein the power source comprises a battery of the portable storage device.

14. The portable storage device of claim 10, wherein the command further comprises an erase command for erasing the memory of the portable storage device.

15. The portable storage device of claim 14, wherein the erasing the memory is to be performed when the portable storage device is connected to a power source.

16. The portable storage device of claim 10, wherein the command is transmitted wirelessly to the portable storage device via a cellular network.

17. The portable storage device of claim 10, wherein the command is transmitted wirelessly to the portable storage device via a near-field communication.

18. The portable storage device of claim 17, wherein the transmitting the command to the portable storage device comprises sending the command and an access code to a user device for forwarding to the portable storage device via the near-field communication.

19. A portable storage device, comprising:

a processor; and

a computer-readable medium storing a plurality of instructions which, when executed by the processor, cause the processor to perform operations, the operations comprising;

detecting a usage of the portable storage device, wherein the portable storage device is a subscriber identity module card;

gathering usage information relating to the portable storage device, wherein the usage information comprises information related to a document that is accessed in the portable storage device; and

transmitting the usage information that is gathered to a management server, wherein the usage information is transmitted wirelessly.

20. The portable storage device of claim 19, wherein the usage information is transmitted wirelessly to the management server via a cellular network.