Data security system with encryption

• US 10,181,055 B2
• Filed: 01/04/2016
• Issued: 01/15/2019
• Est. Priority Date: 09/27/2007
• Status: Active Grant

• Current Assignee: ClevX LLC
• Original Assignee: ClevX LLC
• Inventors: Bolotin, Lev M., Lemelev, Alex, Singer, Marc
• Primary Examiner(s): Cervetti, David Garcia
• Application Number:
  US14/987,749
• Publication Number:
  US 20170017810A1
• Time in Patent Office: 1,107 Days
• CPC Class Codes: G06F 21/31 User authentication
• CPC Class Codes: G06F 21/6218 to a system of files or objects, e.g. local or distributed file system or database
• CPC Class Codes: G06F 21/78 to assure secure storage of data address-based protection against unauthorised use of memory G06F12/14; record carriers for use with machines and with at least a part designed to carry digital markings G06K19/00
• CPC Class Codes: H04L 63/083 using passwords cryptographic mechanisms or cryptographic arrangements for entity authentication using a predetermined code H04L9/3226
• CPC Class Codes: H04W 12/06 Authentication
• CPC Class Codes: H04W 12/068 using credential vaults, e.g. password manager applications or one time password [OTP] applications
• CPC Class Codes: H04W 12/069 using certificates or pre-shared keys

Abstract

A data security system, and a method of operation thereof, includes a data security transceiver or receiver; an authentication subsystem operatively connected to the data security transceiver or receiver; and a storage subsystem connected to the authentication subsystem.

Claims

1. A method of operation of a data security system comprising:

providing a wireless device with a data security system application, for execution on the wireless device, for managing connectivity with the data security system, the data security system having a storage subsystem and a data security transceiver for wireless communication, the wireless device having a device transceiver for wireless communication;

receiving, by the data security system application, authentication information from a user to be authenticated by a server;

requesting, by the data security system application and from the server, authentication of the user based on the authentication information;

in response to the server successfully authenticating the user, requesting, by the data security system application and from the server, unlocking of the data security system based on a personal identification number provided by the user to the data security system application, wherein the unlocking is communicated, from the wireless device to the data security system, via a wireless connection between the data security transceiver and the device transceiver; and

when the server provides an unlock signal to the data security system application, unlocking connectivity to the data security system from the wireless device and enabling access from the wireless device to the storage subsystem in the data security system.

2. The method as claimed in claim 1, further comprising:

maintaining the connectivity when the data security system is within a proximity to the wireless device based on a signal strength measurement of the wireless connection for the wireless device.

3. The method as claimed in claim 1, further comprising:

maintaining the connectivity when the data security system is within a proximity to the wireless device based on a signal strength measurement of the wireless connection for the wireless device for a predetermined period of time.

4. The method as claimed in claim 1, wherein the wireless connection includes bi-directional communication between the data security system and the wireless device.

5. The method as claimed in claim 1, wherein the wireless connection includes uni-directional communication between the data security system and the wireless device.

6. The method as claimed in claim 1, wherein the server contains a user management database with user authentication information.

7. The method as claimed in claim 1, further comprising:

providing a security controller in the data security system for controlling access to the data security system.

8. The method as claimed in claim 1, wherein requesting unlocking of the data security system further comprises:

providing the server with an identification of the data security system; and

unlocking the data security system when the identification of the data security system is enabled at the server.

9. The method as claimed in claim 1, wherein providing the wireless device with the data security system application further comprises:

providing a data security system administrator'"'"'s application;

setting an administrator'"'"'s password in the wireless device;

transmitting the administrator'"'"'s password from the wireless device to the data security system; and

setting the administrator'"'"'s password in the data security system and unlocking the data security system.

10. The method as claimed in claim 1, wherein requesting unlocking of the data security system further comprises:

providing an unlock request along with a device identification from the wireless device to the data security system; and

receiving the unlock request in the data security system and unlocking the data security system.

11. The method as claimed in claim 1, wherein the authentication information includes a user name, or a password, or a combination thereof.

12. The method as claimed in claim 1, wherein requesting unlocking of the data security system further comprises:

transmitting the personal identification number from the wireless device to the server;

determining, by the server, when the personal identification number is valid after receiving the personal identification number from the wireless device; and

unlocking the data security system through the wireless device when the server determines the personal identification number is valid.

13. The method as claimed in claim 1, further comprising:

providing a valid location of the wireless device to the server;

determining, by the server, when the wireless device is in the valid location; and

unlocking the data security system through the wireless device when the server determines the wireless device is in the valid location.

14. The method as claimed in claim 1, further comprising:

determining a current time at the wireless device;

sending the current time to the server;

checking, by the server, a condition to determine if the current time is within a predefined time range; and

unlocking the data security system through the wireless device when the server determines the wireless device is within the predefined time range.

15. The method as claimed in claim 1, further comprising:

providing a command in the server;

providing the command to the wireless device, from the server, in response to a command waiting signal from the wireless device; and

performing the command in the data security system, through the wireless device, when the command is provided from the server.

16. The method as claimed in claim 1, further comprising:

providing a change password command in the server;

providing the change password command to the wireless device, from the server, in response to a change password signal from the wireless device; and

unlocking the data security system with the changed password command.

17. The method as claimed in claim 1, further comprising:

connecting the data security system to a host computer for powering the data security system, wherein the data security system becomes discoverable by the host computer.

18. The method as claimed in claim 1, wherein access from the wireless device to the storage subsystem in the data security system is performed on an external communication channel separate from the wireless connection.

19. A data security system comprising:

a wireless data security transceiver or receiver;

an authentication subsystem operatively connected to the wireless data security transceiver or receiver; and

a storage subsystem connected to the authentication subsystem, wherein the authentication subsystem is configured to communicate, via the wireless data security transceiver or receiver, with a data security system application on a wireless device;

wherein the data security system application is configured to request, from a server, authentication of a user based on authentication information provided by the user;

wherein, in response to the server authenticating the user, the data security system application is configured to request, from the server, unlocking of the data security system based on a personal identification number provided by the user and transmitted via the wireless data security transceiver or receiver from the wireless device to the data security system;

wherein, when the server provides an unlock signal to the wireless device, the wireless device sends the unlock signal to the data security system to unlock connectivity to the data security system from the wireless device and enable access from the wireless device to the storage subsystem in the data security system.

20. The data security system as claimed in claim 19, further comprising:

a security controller connected to the wireless data security transceiver or the receiver and to the authentication subsystem.

21. The data security system as claimed in claim 19, wherein the data security system application is for maintaining connectivity when the data security system is within a proximity to the wireless device based on a signal strength measurement of a wireless connection for the wireless device.

22. The data security system as claimed in claim 19, wherein the data security system application communicates with a security controller in the data security system for maintaining connectivity when the data security system is within a proximity to the wireless device and for locking the data security system when there is no data read/write activity for a predetermined period of time.

23. The data security system as claimed in claim 19, wherein a wireless connection includes bi-directional communication between the data security system and the wireless device.

24. The data security system as claimed in claim 19, wherein a wireless connection includes uni-directional communication between the data security system and the wireless device.

25. The data security system as claimed in claim 19, further comprising:

an external communication channel for connection to a host computer.