Location based disk drive access

• US 10,216,952 B2
• Filed: 04/16/2018
• Issued: 02/26/2019
• Est. Priority Date: 08/21/2014
• Status: Active Grant

• Current Assignee: Seagate Technology LLC (Seagate Technology Holdings Plc)
• Original Assignee: Seagate Technology LLC (Seagate Technology Holdings Plc)
• Inventors: Sand-Soll, Catherine Ellen
• Primary Examiner(s): Schwartz, Darren B
• Application Number:
  US15/954,298
• Publication Number:
  US 20180239923A1
• Time in Patent Office: 316 Days
• CPC Class Codes: G06F 16/22 Indexing; Data structures therefor; Storage structures
• CPC Class Codes: G06F 16/29 Geographical information databases
• CPC Class Codes: G06F 21/31 User authentication
• CPC Class Codes: G06F 21/6218 to a system of files or objects, e.g. local or distributed file system or database
• CPC Class Codes: G06F 21/86 Secure or tamper-resistant housings
• CPC Class Codes: G06F 2221/2111 Location-sensitive, e.g. geographical location, GPS
• CPC Class Codes: H04W 4/02 Services making use of location information
• CPC Class Codes: H04W 4/021 Services related to particular areas, e.g. point of interest [POI] services, venue services or geofences
• CPC Class Codes: H04W 4/029 Location-based management or tracking services

Abstract

Methods, apparatuses, systems, and devices are described for providing data security. In one method, data security is provided for a computing device having a data storage drive. A predetermined geographical area within which access to the data storage drive of the computing device is permitted may be identified. A geographical location of the computing device also may be identified. When the identified geographical location of the computing device is outside of the identified geographical area, access to at least a portion of the data storage drive may be denied. When the identified geographical location of the computing device is within the identified geographical area, access to the portion (or all) of the data storage drive may be allowed.

Claims

1. A method of providing data security for a storage drive, comprising:

identifying a predetermined geographical area within which access to the storage drive is permitted;

determining a geographical location of the storage drive;

permitting access to at least a portion of the storage drive when the determined geographical location of the storage drive is within the identified geographical area;

upon determining the determined geographical location of the storage drive is outside the identified geographical area, determining a time period over which the storage drive remains outside the identified geographical area;

upon determining the time period satisfies a time threshold, denying access to at least a portion of the storage drive;

determining a failure of identifying the geographical location of the storage drive, or that the geographical location of the storage drive is indeterminable, or determining both; and

denying access to at least the portion of the storage drive based at least in part on the determining.

2. The method of claim 1, further comprising:

identifying an alteration with respect to at least one of identifying the predetermined geographical area or identifying the geographical location; and

denying access to at least the portion of the storage drive based at least in part on the identifying of the alteration.

3. The method of claim 1, further comprising:

removing data in a memory device accessed from the storage drive when the determined geographical location of the storage drive is outside of the identified geographical area.

4. The method of claim 1, further comprising:

identifying when the storage drive is moved; and

re-identifying the geographical location of the storage drive when the storage drive is identified as moved.

5. The method of claim 1, further comprising:

determining an amount of movement of the storage drive; and

denying access to at least a portion of the storage drive when the determined amount of movement exceeds a movement threshold.

6. The method of claim 5, further comprising:

setting the movement threshold based at least in part on the identified geographical area.

7. The method of claim 1, further comprising:

upon determining the geographical location of the storage drive is not able to be identified, determining an amount of movement of the storage drive; and

denying access to at least a portion of the storage drive when the determined amount of movement exceeds a movement threshold.

8. The method of claim 1, wherein denying access is performed by shutting down the storage drive, or by disabling at least part of the storage drive, or by destroying at least part of the storage drive, or by encrypting data stored on at least the portion of the storage drive, or any combination thereof.

9. The method of claim 1, wherein the predetermined geographical area is at least one of discontinuous or comprises a plurality of distinct geographical areas.

10. A computing device, comprising:

a storage drive;

one or more processors;

memory in electronic communication with the one or more processors, wherein the memory stores computer executable instructions that when executed by the one or more processors cause the one or more processors to perform the steps of;

identifying a predetermined geographical area within which access to the storage drive is permitted;

determining a geographical location of the storage drive;

permitting access to at least a portion of the storage drive when the determined geographical location of the storage drive is within the identified geographical area;

upon determining the determined geographical location of the storage drive is outside the identified geographical area, determining a time period over which the storage drive remains outside the identified geographical area;

upon determining the time period satisfies a time threshold, denying access to at least a portion of the storage drive;

determining a failure of identifying the geographical location of the storage drive, or that the geographical location of the storage drive is indeterminable, or determining both; and

denying access to at least the portion of the storage drive based at least in part on the determining.

11. The computing device of claim 10, the one or more processors to perform the steps of:

identifying an alteration with respect to at least one of identifying the predetermined geographical area or identifying the geographical location; and

denying access to at least the portion of the storage drive based at least in part on the identifying of the alteration.

12. The computing device of claim 10, the one or more processors to perform the steps of:

removing data in a memory device accessed from the storage drive when the determined geographical location of the storage drive is outside of the identified geographical area.

13. The computing device of claim 10, the one or more processors to perform the steps of:

identifying when the storage drive is moved; and

re-identifying the geographical location of the storage drive when the storage drive is identified as moved.

14. The computing device of claim 10, the one or more processors to perform the steps of:

determining an amount of movement of the storage drive; and

denying access to at least a portion of the storage drive when the determined amount of movement exceeds a movement threshold.

15. The computing device of claim 14, the one or more processors to perform the steps of:

setting the movement threshold based at least in part on the identified geographical area.

16. The computing device of claim 10, the one or more processors to perform the steps of:

upon determining the geographical location of the storage drive is not able to be identified, determining an amount of movement of the storage drive; and

denying access to at least a portion of the storage drive when the determined amount of movement exceeds a movement threshold.

17. A computer-program product comprising a non-transitory computer-readable medium storing instructions thereon, the instructions being executable by one or more processors to perform the steps of:

identifying a predetermined geographical area within which access to the storage drive is permitted, wherein the predetermined geographical area includes one or more distinct geographical areas;

determining a geographical location of the storage drive;

permitting access to at least a portion of the storage drive when the determined geographical location of the storage drive is within the identified geographical area;

upon determining the determined geographical location of the storage drive is outside the identified geographical area, determining a time period over which the storage drive remains outside the identified geographical area;

upon determining the time period satisfies a time threshold, denying access to at least a portion of the storage drive;

determining a failure of identifying the geographical location of the storage drive, or that the geographical location of the storage drive is indeterminable, or determining both; and

denying access to at least the portion of the storage drive based at least in part on the determining.

18. The computer-program product of claim 17, wherein the instructions executed by the one or more processors cause the one or more processors to perform the steps of:

identifying an alteration with respect to at least one of identifying the predetermined geographical area or identifying the geographical location; and

denying access to at least the portion of the storage drive based at least in part on the identifying of the alteration.