LOCATION-BASED DATA SECURITY SYSTEM

• US 20150278539A1
• Filed: 03/27/2015
• Published: 10/01/2015
• Est. Priority Date: 03/30/2014
• Status: Abandoned Application

• Current Assignee: Lucas G. Scarasso
• Original Assignee: Lucas G. Scarasso
• Inventors: Scarasso, Lucas G.
• Application Number:
  US14/671,753
• Publication Number:
  US 20150278539A1
• Time in Patent Office: Days
• US Class Current: 1/1
• CPC Class Codes: G01S 19/13 Receivers
• CPC Class Codes: G01S 19/48 by combining or switching between position solutions derived from the satellite radio beacon positioning system and position solutions derived from a further system
• CPC Class Codes: G06F 21/6218 to a system of files or objects, e.g. local or distributed file system or database
• CPC Class Codes: G06F 21/79 in semiconductor storage media, e.g. directly-addressable memories
• CPC Class Codes: G06F 21/86 Secure or tamper-resistant housings
• CPC Class Codes: G06F 2221/2111 Location-sensitive, e.g. geographical location, GPS
• CPC Class Codes: H04L 9/0872 using geo-location information, e.g. location data, time, relative position or proximity to other entities
• CPC Class Codes: H04L 9/0897 involving additional devices, e.g. trusted platform module [TPM], smartcard or USB

Abstract

An apparatus for protecting data stored within a storage device from being accessed outside of previously defined geographic areas can comprise a storage module for storing data within a storage device. The apparatus can also comprise a location module for detecting a geographic location of the storage device. The device can further comprise a processing module for determining whether a detected geographic location is within a previously defined geographic area. Further still, the apparatus can comprise a first data security module in communication with the processing module. The first data security module can be configured to allow access to data stored within the storage module when the processing module determines that the detected geographic location is within the previously defined geographic area.

Claims

1. A method for protecting data stored within a storage device from being accessed outside of previously defined geographic areas, the method comprising:

detecting a connection of a storage device to an external computing device;

determining through one or more location-detection modules that are internal to the storage device whether the storage device is located within a previously defined geographic area;

if the storage device is determined to be located within the previously defined geographic area, allowing data stored within the storage device to be accessed; and

if the storage device is determined to not be within the previously defined data location area, preventing data stored within the storage device from being accessed.

2. The method as recited in claim 1, further comprising:

receiving, at the storage device, an indication defining a geographic area; and

storing the defined geographic area within the storage device.

3. The method as recited in claim 2, further comprising:

receiving, at the storage device, one or more indications defining multiple, distinct geographic areas; and

storing the defined multiple, distinct geographic areas within the storage device.

4. The method as recited in claim 1, further comprising:

receiving initial location information from a first location-detection module;

receiving additional location information from a second, different location-detection module;

comparing the additional location information with the initial location information; and

determining that the additional location information and the initial location information are consistent with each other.

5. The method as recited in claim 4, wherein the first location-detection module is selected from a group consisting of a satellite based navigation system, a cellular triangulation system, a Wi-Fi triangulation system, and an altimeter.

6. The method as recited in claim 5, wherein the second, different location-detection module is selected from a group consisting of a satellite based navigation system, a cellular triangulation system, a Wi-Fi triangulation system, and an altimeter.

7. The method as recited in claim 1, further comprising:

receiving initial location information from a satellite based navigation system;

receiving altitude information from an altimeter;

comparing the altitude information with an expected altitude associated with the initial location information; and

determining that the altitude is consistent with the initial location information.

8. The method as recited in claim 1, further comprising:

if the storage device is determined to not be within the previously defined data location area, deleting data stored within the storage device.

9. The method as recited in claim 1, further comprising:

receiving, through an antenna within the storage device, information from one or more broadcasting sources;

based upon the received information, triangulating a location of the storage device; and

comparing the received location information to a location associated with the previously defined geographic area.

10. The method as recited in claim 1, further comprising:

if the storage device is determined to be located within the previously defined geographic area, providing power to a storage portion of the storage device, such that data can be accessed from the storage device.

11. The method as recited in claim 10, further comprising:

if the storage device is determined to be located within the previously defined geographic area, providing an encryption key, stored within the storage device, that decrypts data stored within the storage device.

12. The method as recited in claim 11, wherein encrypted data stored within the storage device is decrypted by a processing module within the storage device.

13. The method as recited in claim 11, wherein the encryption key is provided to the external computing device so that the external computing device can decrypt data stored within the storage device.

14. A location-based data security storage device, the storage device comprising:

a communication port for communicating data stored within a storage module to an external computing device;

a location module for detecting a geographic location of the storage device;

a processing module for determining whether a detected geographic location is within a previously defined geographic area; and

a first data security module in communication with the processing module, wherein the first data security module is configured to allow access to data stored within the storage module when the processing module determines that the detected geographic location is within the previously defined geographic area.

15. The storage device as recited in claim 14, further comprising multiple location modules.

16. The storage device as recited in claim 14, wherein the location module is selected from a group consisting of a satellite based navigation system, a cellular triangulation system, a Wi-Fi triangulation system, and an altimeter.

17. The storage device as recited in claim 14 wherein the first data security module comprises a power coupling switch that connects the storage module with a power source, wherein the power coupling switch is controlled by the processing module.

18. The storage device as recited in claim 14 wherein the first data security module comprises an encryption module that stores an encryption key for encrypted data stored within the storage module, wherein the encryption module is controlled by the processing module.

19. The storage device as recited in claim 14 further comprising a resin filler, wherein the resin filler is configured to prevent tampering with the storage device.

20. A system for protecting data stored within a storage device from being accessed outside of previously defined geographic areas, the system comprising:

a storage module for storing data within a storage device;

a location module for detecting a geographic location of the storage device;

a processing module for determining whether a detected geographic location is within a previously defined geographic area; and

a first data security module in communication with the processing module, wherein the first data security module is configured to allow access to data stored within the storage module when the processing module determines that the detected geographic location is within the previously defined geographic area.