DATA PROTECTING DEVICE

• US 20110162076A1
• Filed: 12/31/2009
• Published: 06/30/2011
• Est. Priority Date: 12/31/2009
• Status: Active Grant

• Current Assignee: Fujitsu Limited
• Original Assignee: Fujitsu Limited
• Inventors: SONG, Zhexuan, Gordon, Joseph, Molina, Jesus
• Granted Patent: US 8,745,747 B2
• Time in Patent Office: Days
• US Class Current: 726/26
• CPC Class Codes: G06F 21/554 involving event detection and direct action
• CPC Class Codes: G06F 21/86 Secure or tamper-resistant housings
• CPC Class Codes: G06F 2221/2105 Dual mode as a secondary aspect
• CPC Class Codes: G06F 2221/2129 Authenticate client device independently of the user
• CPC Class Codes: G06F 2221/2143 Clearing memory, e.g. to prevent the data from being stolen
• CPC Class Codes: G06F 2221/2151 Time stamp
• CPC Class Codes: H04L 63/1416 Event detection, e.g. attack signature detection

Abstract

An event condition is checked, using a computer and data content of the computer is additionally protected in relation to a normal data protection according to the event condition. The event condition is detecting by the computer a remote command and/or detecting a state according to a policy.

Claims

1. A method, comprising:

checking for an event condition, using a computer; and

additionally protecting target data of the computer in relation to a normal data protection on the computer, according to the event condition.

2. The method according to claim 1, wherein the checking of the event condition comprises detecting a remote command by the computer and/or detecting a state of the computer.

3. The method according to claim 2, wherein the detecting of the remote command comprises:

activating at the computer at random time intervals a security check from a remote computer via a data communication interface; and

obtaining the event condition from the remote computer.

4. The method according to claim 3, wherein the event condition obtained from the remote computer comprises one or more of a computer identification (ID), output of a function using a current time and a data protection function for the additionally protecting of the target data on the computer,

wherein a detected state of the computer triggering the additionally protecting of the target data is according to one or more of a failure to obtain the event condition from the remote computer, verifications of the computer ID and/or the function output or any combinations thereof.

5. The method according to claim 3,

wherein the event condition obtained from the remote computer comprises an encrypted message including a data protection function and a random number, and

wherein the activating of the security check comprises receiving the encrypted message during a time window at the random time intervals and a random number synchronized with the remote computer.

6. The method according to claim 5, wherein a detected state of the computer triggering the additionally protecting of the target data is according to a failure to obtain the event condition from the remote computer, a failure to verify the encrypted message, or a failure to receive a random number in sequence, or any combinations thereof.

7. The method according to claim 6, further comprising accumulating a history of failures to obtain the event condition during one or more time windows until reaching a condition to trigger the additionally protecting of the target data.

8. The method according to claim 7, wherein a duration of the time window is settable according to a policy increasing or decreasing synchronization between the computer and the remote computer.

9. The method according to claim 2, wherein the state of the computer comprises one or more of a failure based upon user authentication, verification of the computer, verification of a remote computer, physical tempering of the computer, or any combinations thereof, according to a policy.

10. The method according claim 9, further comprising operating at the computer and/or at the remote computer a virtual machine and measuring the virtual machine of the computer and/or the remote computer for verification.

11. The method according to claim 1, wherein the protecting of the target data includes destroying the target data content by erasing the data, invalidating an encryption key to the target data and/or physical destruction.

12. The method according to claim 1, wherein the checking of the event condition comprises:

detecting a remote command by the computer by;

activating at the computer at random time intervals a security check from a remote computer via a data communication interface, and

obtaining the event condition from the remote computer; and

/or

detecting a state of the computer based upon;

a failure based upon user authentication, verification of the computer, verification of a remote computer, physical tempering of the computer, or any combinations thereof, according to a policy.

13. The method according to claim 1, wherein the event condition is a period of time and upon expiration of the time period, the additionally protecting of the target data includes making target data of the computer inaccessible.

14. The method according to claim 1, wherein the event condition includes communicably disconnecting the computer from another computer and the additionally protecting of the target data includes making target data of the computer inaccessible after a period of time from the disconnecting.

15. A computing device communicably connectable to a remote computer, comprising:

a computer processor that executes

checking for an event condition; and

additionally protecting target data of the portable device in relation to a normal data protection, according to the event condition.

16. The device according to claim 15, wherein the checking of the event condition comprises:

detecting a remote command by;

activating at random time intervals a security check from the remote computer via a data communication interface, and

obtaining the event condition from the remote computer; and

/or

detecting a state of the portable device based upon;

a failure based upon user authentication, verification of the portable device, verification of the remote computer, physical tempering of the portable device, or any combinations thereof, according to a policy.

17. The device according to claim 15, wherein the event condition is a period of time and upon expiration of the time period, the additionally protecting of the target data includes making target data of the portable device inaccessible.

18. The device according to claim 15, wherein the event condition includes communicably disconnecting from the remote computer and the additionally protecting of the target data includes making target data of the computer inaccessible after a period of time from previous communication with the remote computer.

19. The device according to claim 15,

wherein the activating of the security check comprises receiving a message during a time window at the random time intervals and a random number synchronized with the remote computer, and

wherein a detected state of the computer triggering the additionally protecting of the target data is according to a failure to obtain the event condition from the remote computer, a failure to verify the message, or a failure to receive a random number in sequence, or any combinations thereof.

20. A computer system comprising:

a server computer; and

a portable device communicably connectable to the server computer and including a computer processor that executes

checking for an event condition from the server computer and/or from a state of the portable device; and

additionally protecting target data of the portable device in relation to a normal data protection, according to the event condition.