LOCATION BASED DISK DRIVE ACCESS

• US 20160055340A1
• Filed: 08/21/2014
• Published: 02/25/2016
• Est. Priority Date: 08/21/2014
• Status: Active Grant

• Current Assignee: Seagate Technology LLC (Seagate Technology Holdings Plc)
• Original Assignee: Seagate Technology LLC (Seagate Technology Holdings Plc)
• Inventors: SAND-SOLL, CATHERINE ELLEN
• Granted Patent: US 9,378,383 B2
• Time in Patent Office: Days
• US Class Current: 1/1
• CPC Class Codes: G06F 16/22 Indexing; Data structures therefor; Storage structures
• CPC Class Codes: G06F 16/29 Geographical information databases
• CPC Class Codes: G06F 21/31 User authentication
• CPC Class Codes: G06F 21/6218 to a system of files or objects, e.g. local or distributed file system or database
• CPC Class Codes: G06F 21/86 Secure or tamper-resistant housings
• CPC Class Codes: G06F 2221/2111 Location-sensitive, e.g. geographical location, GPS
• CPC Class Codes: H04W 4/02 Services making use of location information
• CPC Class Codes: H04W 4/021 Services related to particular areas, e.g. point of interest [POI] services, venue services or geofences
• CPC Class Codes: H04W 4/029 Location-based management or tracking services

Abstract

Methods, apparatuses, systems, and devices are described for providing data security. In one method, data security is provided for a computing device having a data storage drive. A predetermined geographical area within which access to the data storage drive of the computing device is permitted may be identified. A geographical location of the computing device also may be identified. When the identified geographical location of the computing device is outside of the identified geographical area, access to at least a portion of the data storage drive may be denied. When the identified geographical location of the computing device is within the identified geographical area, access to the portion (or all) of the data storage drive may be allowed.

Claims

1. A method of providing data security for a computing device having a data storage drive, comprising:

identifying a predetermined geographical area within which access to the data storage drive of the computing device is permitted;

identifying a geographical location of the computing device; and

denying access to at least a portion of the data storage drive when the identified geographical location of the computing device is outside of the identified geographical area.

2. The method of claim 1, further comprising:

encrypting all data stored on at least the portion of the data storage drive.

3. The method of claim 1, further comprising:

determining that the identified geographical location of the computing device is outside of the identified geographical area for at least one of a predetermined period of time or for a predetermined number of geographical identifications;

wherein denying access is based at least in part on the determining.

4. The method of claim 1, further comprising:

determining that the computing device is altered with respect to at least one of identifying the predetermined geographical area or identifying the geographical location; and

denying access to at least the portion of the data storage drive based at least in part on the determining.

5. The method of claim 1, further comprising:

removing from memory of the computing device data accessed from the data storage drive when the identified geographical location of the computing device is outside of the identified geographical area.

6. The method of claim 1, further comprising:

identifying when the computing device is moved; and

re-identifying the geographical location of the computing device when the computing device is identified as moved.

7. The method of claim 1, further comprising:

determining a failure of identifying the geographical location of the computing device; and

denying access to at least the portion of the data storage drive based at least in part on the determining.

8. The method of claim 1, further comprising:

determining that the identified geographical location of the computing device is within of the identified geographical area;

determining that a geographic location of the computing device is not able to be identified during subsequent operation of the computing device;

determining an amount of movement of the computing device; and

denying access to at least a portion of the data storage drive when the determined amount of movement exceeds a threshold value.

9. The method of claim 8, further comprising:

setting the threshold value based at least in part on the identified geographical area.

10. The method of claim 1, wherein denying access is performed by shutting down the data storage drive.

11. The method of claim 1, wherein denying access is performed by disabling at least part of the data storage drive.

12. The method of claim 1, wherein denying access is performed by destroying at least part of the data storage drive.

13. The method of claim 1, wherein the predetermined geographical area is discontinuous.

14. The method of claim 1, wherein the predetermined geographical area comprises a plurality of distinct geographical areas.

15. A computing device, comprising:

a data storage drive;

a location component configured to identify a geographical location of the computing device; and

a controller configured to deny access to at least a portion of the data storage drive when the geographical location of the computing device identified by the location component is outside of a predetermined geographical area within which access to the data storage drive of the computing device is permitted.

16. The computing device of claim 15, further comprising:

a movement detector configured to indicate when the computing device is moved;

wherein the location component is configured to re-identify the geographical location of the computing device based at least in part on an indication from the movement detector.

17. The computing device of claim 15, further comprising:

a tamper detector configured to indicate when the location component is altered in an unauthorized manner;

wherein the controller is configured to deny access to the portion of the data storage drive based at least in part on an indication from the tamper detector.

18. A system for providing data security for a computing device having a data storage drive, comprising:

a stored security policy for the computing device that identifies a predetermined geographical area within which access to the data storage drive of the computing device is permitted;

a processor configured to identify a current geographical location of the computing device and to generate a signal to deny access to at least a portion of the data storage drive of the computing device when the current geographical location of the computing device is outside of the predetermined geographical area; and

a transmitter configured to send the signal to the computing device.

19. The system of claim 18, further comprising:

a device identifier configured to identify the computing device;

wherein the processor is configured to access the stored security policy for the computing device from a plurality of stored security policies based at least in part on an identity of the computing device from the device identifier.

20. The system of claim 18, further comprising:

a location component configured to separately identify the geographical location of the computing device.