Portable storage device for providing secure and mobile information

• US 20030216136A1
• Filed: 05/16/2002
• Published: 11/20/2003
• Est. Priority Date: 05/16/2002
• Status: Abandoned Application

• Current Assignee: International Business Machines Corporation
• Original Assignee: International Business Machines Corporation
• Inventors: Mullen, Shawn Patrick, McBrearty, Gerald Francis, Shieh, Johnny Meng-Han
• Application Number:
  US10/150,004
• Publication Number:
  US 20030216136A1
• Time in Patent Office: Days
• US Class Current: 455/410
• CPC Class Codes: G06F 21/33 using certificates
• CPC Class Codes: H04L 63/083 using passwords cryptographic mechanisms or cryptographic arrangements for entity authentication using a predetermined code H04L9/3226
• CPC Class Codes: H04W 12/068 using credential vaults, e.g. password manager applications or one time password [OTP] applications
• CPC Class Codes: H04W 12/08 Access security
• CPC Class Codes: H04W 76/10 Connection setup
• CPC Class Codes: H04W 8/18 Processing of user or subscriber data, e.g. subscribed services, user preferences or user profiles; Transfer of user or subscriber data
• CPC Class Codes: H04W 8/26 Network addressing or numbering for mobility support
• CPC Class Codes: H04W 84/12 WLAN [Wireless Local Area Networks]
• CPC Class Codes: H04W 84/18 Self-organising networks, e.g. ad-hoc networks or sensor networks

Abstract

A system and method in which user personalized directories of information are maintained on portable and wireless personal data devices. The personal data devices include a storage medium, a wireless transmitter, and a state machine suitable for implementing a wireless protocol such as Bluetooth or IEEE 802.11b. Typically, the personal data devices are small enough to clip or otherwise attach to a user'"'"'s clothing. The personal data device is configured to transmit a signal that includes personal data device (PDD) identification information. When the user is within range of a suitably enabled workstation, the workstation “hears” the signal and deciphers the PDD ID. If the user attempts to log on to the network, the workstation will prompt the user for a username/password combination and compare the user'"'"'s responses to information password and user ID information stored in a table that is accessible to the workstation. If the workstation is able to confirm the user ID and password, it may then perform a second authorization sequence in which the workstation sends a workstation password to the personal data device. The workstation may also send additional information such as a directory that the workstation proposes to use as a mount point. This proposed directory typically specifies the user'"'"'s personalized directory. If the personal data device is able to confirm the workstation password and the proposed directory as valid, a “connection” is established between the personal data device and the workstation. The workstation is then able to mount the user'"'"'s directory on the personal data device and provide the user'"'"'s personal desktop to him or her.

Claims

1. A data processing configuration, comprising:

a portable personal data device including a storage element, a radio frequency transceiver, and a state machine suitable for implementing a wireless protocol enabling transmission and receipt of data via the transceiver, wherein the storage element includes desktop data personal to a corresponding user and wherein the personal data device is configured to transmit, via the transceiver, a wireless signal identifying the personal data device;

a host workstation including at least one processor connected to a volatile system memory, a transceiver suitable for receiving the wireless signal and for determining the personal data device identifying information;

means for securely accessing a database containing an entry for each of the at least one personal data devices, wherein each entry includes personal data device identification and password information;

workstation means for determining if the wireless signal is being transmitted by a recognized personal data device;

responsive to recognizing the personal data device, means for authorizing a wireless connection between the personal data device and the workstation;

responsive to successfully authorizing the connection, workstation means for wirelessly accessing the personal data stored on the personal data device to enable the user to access the personal data via the workstation.

2. The configuration of claim 1, wherein the portable personal data device is configured for removable attachment to the user'"'"'s clothing.

3. The configuration of claim 1, wherein the wireless protocol is selected from the group including an IEEE 802.11b protocol and a Bluetooth protocol.

4. The configuration of claim 1, wherein the host information includes a host password and wherein the storage element includes at least one entry, wherein each stored entry contains a corresponding host password and further wherein the means for verifying the host information includes means for comparing the received host password to the host password in each entry in the storage element.

5. The configuration of claim 4, wherein the host information further includes a host-proposed directory path and wherein the means for verifying the host information includes means for comparing the host-proposed directory path to a directory path stored in the storage element.

6. The configuration of claim 1, wherein the means for enabling the host to access the desktop data includes means for providing a directory mount point to the host.

7. The configuration of claim 1, wherein the means for determining a recognized personal data device including means comparing the personal data device identification information determined from the signal to personal data device identification information stored in the database.

8. The configuration of claim 1, wherein the means for authorizing the connection includes;

means for authorizing the user of the personal data device to the workstation; and

means for authorizing the workstation to the personal data device.

9. The configuration of claim 8, wherein the means for authorizing the user includes means for prompting the user to enter password information and means for comparing the entered password information to password information stored in the database.

10. The configuration of claim 8, wherein the means for authorizing the workstation to the personal data device includes means for wirelessly transmitting workstation information from the workstation to the personal data device.

11. The configuration of claim 10, wherein the means for authorizing the workstation to the personal data device further includes means for wirelessly transmitting a workstation proposed directory path to the personal data device wherein proposed directory path represents a directory path the workstation will mount if the connection is authorized.

12. The configuration of claim 1, wherein the means for wirelessly accessing the personal data stored on the personal data device includes means for wirelessly mounting a directory path under which the personal data is stored.

13. A portable personal data device, comprising:

a storage element, a radio frequency transceiver, and a state machine suitable for implementing a wireless protocol enabling transmission and receipt of data via the transceiver, wherein the storage element includes desktop data personal to a corresponding user and wherein the personal data device is configured to transmit, via the transceiver, a wireless signal identifying the personal data device;

means for verifying host information received wirelessly from the host that identifies the host to the portable processing device; and

responsive to verifying the host, means for enabling the host to access the desktop data wirelessly.

14. The device of claim 13, wherein the portable personal data device is configured for removable attachment to the user'"'"'s clothing.

15. The device of claim 13, wherein the wireless protocol is selected from the group including an IEEE 802.11b protocol and a Bluetooth protocol.

16. The device of claim 13, wherein the host information includes a host password and wherein the storage element includes at least one entry, wherein each stored entry contains a corresponding host password and further wherein the means for verifying the host information includes means for comparing the received host password to the host password in each entry in the storage element.

17. The device of claim 16, wherein the host information further includes a host-proposed directory path and wherein the means for verifying the host information includes means for comparing the host-proposed directory path to a directory path stored in the storage element.

18. The device of claim 13, wherein the means for enabling the host to access the desktop data includes means for providing a directory mount point to the host.

19. A workstation suitable for use with at least one personal data device, the workstation including at least one processor connected to a volatile system memory and further comprising:

a transceiver suitable for receiving a wireless signal transmitted by one of the personal data devices and further suitable for determining information contained in the signal identifying the corresponding personal data device;

means for securely accessing a database containing an entry for each of the at least one personal data devices, wherein each entry includes personal data device identification and password information;

means for determining if the wireless signal is being transmitted by a recognized personal data device;

responsive to recognizing the personal data device, means for authorizing a connection between the personal data device and the workstation;

responsive to successfully authorizing the connection, means for wirelessly accessing the personal data stored on the personal data device to enable the user to access the personal data via the workstation.

20. The workstation of claim 19, wherein the means for determining a recognized personal data device including means comparing the personal data device identification information determined from the signal to personal data device identification information stored in the database.

21. The workstation of claim 19, wherein the means for authorizing the connection includes;

means for authorizing the user of the personal data device to the workstation; and

means for authorizing the workstation to the personal data device.

22. The workstation of claim 21, wherein the means for authorizing the user includes means for prompting the user to enter password information and means for comparing the entered password information to password information stored in the database.

23. The workstation of claim 21, wherein the means for authorizing the workstation to the personal data device includes means for wirelessly transmitting workstation information from the workstation to the personal data device.

24. The workstation of claim 23, wherein the means for authorizing the workstation to the personal data device further includes means for wirelessly transmitting a workstation proposed directory path to the personal data device wherein proposed directory path represents a directory path the workstation will mount if the connection is authorized.

25. The workstation of claim 19, wherein the means for wirelessly accessing the personal data stored on the personal data device includes means for wirelessly mounting a directory path under which the personal data is stored.

26. The workstation of claim 19, wherein the transceiver complies with a wireless protocol selected from the group including IEEE. 802.11b and Bluetooth.