Selective storage device wiping system and method

• US 10,445,534 B2
• Filed: 03/20/2017
• Issued: 10/15/2019
• Est. Priority Date: 02/26/2015
• Status: Active Grant

• Current Assignee: WhiteCanyon Software, Inc.
• Original Assignee: WhiteCanyon Software, Inc.
• Inventors: Griffes, Donald E., Pedigo, Daniel S., Barak, Tuvia
• Primary Examiner(s): Padmanabhan, Mano
• Assistant Examiner(s): Edouard, Jean C
• Application Number:
  US15/463,894
• Publication Number:
  US 20170255797A1
• Time in Patent Office: 939 Days
• Field of Search: 711166
• CPC Class Codes: G06F 11/1441 Resetting or repowering
• CPC Class Codes: G06F 21/88 Detecting or preventing theft or loss
• CPC Class Codes: G06F 2221/2143 Clearing memory, e.g. to prevent the data from being stolen

Abstract

A storage device wiping system and method that is activated from a remote server or other site when a computer is reported lost or stolen. The wipe technique selectively wipes all data files and free space before beginning to wipe the entire storage device. This causes any personal data files, photos, videos, and the like to be wiped first. Once the wiping process starts, it will continue until complete. The process starts or continues whenever the computer is booted. Only when all personal and sensitive data is wiped, will the system then change the encryption key (if there is one) and begin wiping the entire storage device.

Claims

1. A method for converting personal information on a storage device installed in a target computer from an accessible state to a inaccessible state comprising:

placing a set of executable instructions on the target computer, the target computer connectable to the network;

the set of executable instructions automatically executing whenever the target computer boots;

the set of executable instructions transmitting a unique ID of the target computer over the network to the control computer and requesting status of the target computer;

the set of executable instructions receiving the status of the target computer over the network and either turning control over to the operating system or firmware of the target computer if the status is safe leaving the personal data in the accessible state, or initiating a wipe operation on the target computer if the status is unsafe converting the personal data to an inaccessible state;

if the status is unsafe the set of executable instructions selectively wiping addresses belonging to specific files from the storage device by sending write commands to the storage device, the write commands referencing wipe data patterns the wipe operation proceeding on a file-by-file basis first wiping data files, then wiping free space, and finally wiping the entire storage device.

2. The method of claim 1 further comprising the set of executable instructions performing the steps of transmitting the ID and requesting status receiving the status and turning control over or initiating a wipe operation periodically during normal operation of the target computer.

3. The method of claim 1 wherein said data files include documents, photographs, videos and spreadsheets.

4. The method of claim 1 further comprising wiping all applications before commencing wiping of the entire storage device.

5. The method of claim 1 further comprising wiping all executable binary files before commencing wiping of the entire storage device.

6. The method of claim 1 further comprising changing an encryption key related to the storage device memory before commencing wiping the entire storage device.

7. The method of claim 1 further comprising storing a list of filenames on the target computer to be overwritten on the storage device.

8. The method of claim 7 comprising wiping files from the storage device according to the list of filenames.

9. The method of claim 1 wherein the wipe operation resumes each time the target computer is booted.

10. A method for converting personal information on a storage device installed in a target computer from an accessible state to a inaccessible state comprising:

placing a set of executable instructions on the target computer, the target computer connectable to the network;

the set of executable instructions automatically executing whenever the target computer boots;

the set of executable instructions transmitting a unique ID of the target computer over the network to the control computer and requesting status of the target computer;

the set of executable instructions receiving the status of the target computer over the network and either turning control over to the operating system or firmware of the target computer if the status is safe leaving the personal data in the accessible state, or initiating a wipe operation on the target computer if the status is unsafe converting the personal data to an inaccessible state;

if the status is unsafe the set of executable instructions selectively wiping addresses belonging to specific files from the storage device by sending write commands to the storage device, the write commands referencing wipe data patterns the wipe operation proceeding on a file-by-file basis.