SELF-CONTAINED STORAGE DEVICE FOR SELF-CONTAINED APPLICATION EXECUTION

• US 20160062762A1
• Filed: 01/09/2015
• Published: 03/03/2016
• Est. Priority Date: 08/29/2014
• Status: Abandoned Application

• Current Assignee: Coban Technologies Incorporated (Safe Fleet Holdings LLC)
• Original Assignee: Coban Technologies Incorporated (Safe Fleet Holdings LLC)
• Inventors: Chen, Allan, Tan, Yun Long, Chang, Hung C.
• Application Number:
  US14/593,722
• Publication Number:
  US 20160062762A1
• Time in Patent Office: Days
• US Class Current: 1/1
• CPC Class Codes: G06F 12/0246 in block erasable memory, e.g. flash memory
• CPC Class Codes: G06F 12/1408 by using cryptography for digital transmission H04L9/00
• CPC Class Codes: G06F 21/44 Program or device authentication
• CPC Class Codes: G06F 21/79 in semiconductor storage media, e.g. directly-addressable memories
• CPC Class Codes: G06F 2212/1052 Security improvement
• CPC Class Codes: G06F 2212/7206 Reconfiguration of flash memory system
• CPC Class Codes: G06F 2212/7207 management of metadata or control data
• CPC Class Codes: G06F 8/654 using techniques specially adapted for alterable solid state memories, e.g. for EEPROM or flash memories

Abstract

A storage device that is pre-configured to execute one or more related applications when connected to a computer device or system. The storage device may contain a suite of applications that are pre-configured to execute without requiring “installation” on the computer device or system prior to execution. The storage device may be a secure (e.g., protected) storage drive for use with the associated computer device or system. The secure storage drive allows access only when properly authenticated to the computer device or system attempting to access the secure storage drive. Additionally, other levels of authentication may be required prior to allowing access. For example, access may only be allowed if both the computer device or system and a user authenticated to the computer device are recognized by the secure storage drive.

Claims

1. A system comprising:

a storage device for use with a computer system or computer device, the computer system or computer device including an operating system, the storage device comprising;

a storage area;

a data access controller configured to control access to the storage area;

firmware instructions configured for (i) permitting access from the computer system or computer device to the storage device upon successful authentication by the computer system or computer device, and (ii) preventing access from the computer system or computer device to the storage device absent successful authentication by the computer system or computer device; and

one or more pre-configured applications, stored in the storage area and configured for self-contained execution from the storage device,

wherein the self-contained execution is initiated on the computer system or computer device using execution information only from the storage device, and

wherein the preventing access comprises rendering the storage device hidden from the operating system of the computer system or computer device absent successful authentication from the computer system or computer device.

2. The system of claim 1, wherein the one or more pre-configured applications comprise software applications for a mobile surveillance system.

3. The system of claim 1, wherein the one or more pre-configured applications comprise:

a media player application to play multi-media files; and

a software application for a mobile surveillance system configured to manage configuration information of a mobile video/audio recording device and to catalogue available multi-media files to facilitate searching of the available multi-media files.

4. The system of claim 1, wherein the storage area further stores an update package, the update package comprising information to automatically update at least one of firmware or software on the computer system or computer device in response to the computer system or computer device detecting the update package.

5. The system of claim 1, wherein self-contained execution from the storage device comprises execution of the one or more pre-configured applications independently of information from a registry on the computer system or computer device.

6. The system of claim 1, wherein execution of the one or more pre-configured applications comprises storing information to the storage area and a separate storage device of the computer system or computer device concurrently.

7. The system of claim 1, wherein the storage device comprises a secure storage drive, and the storage area comprises a flash memory storage area.

8. The system of claim 7, wherein the firmware instructions comprise:

a first portion of firmware instructions pertaining to access to the secure storage drive, the first portion of firmware instructions having access to unhide information stored on the secure storage drive, the unhide information pertaining to unhiding the secure storage drive; and

a second portion of firmware instructions pertaining to access to the flash memory storage area;

wherein the data access controller is further configured to utilize the first and second portions of firmware instructions to control access to the secure storage drive and the flash memory storage area;

wherein the first portion of firmware instructions comprises instructions that initiate execution upon connection of the secure storage drive to the computer system or computer device, and block functional connection of the secure storage drive to the computer system or computer device unless the computer system or computer device provides proper authentication information, the proper authentication information corresponding to the unhide information, and

wherein upon receipt of proper authentication information, the first portion of firmware instructions allows functional connection of the secure storage drive to the computer system or computer device and allows the second portion of firmware instructions to control access requests from the computer system or computer device to the flash memory storage area.

19. The system of claim 1, wherein the one or more applications configured for self-contained execution comprise software applications configured for (i) maintaining a chain of custody of evidence for recorded first information, or (ii) recording second information and creating an audit trail log, wherein the audit trail log includes information regarding access or alteration of the recorded second information.

21. The system of claim 1, wherein the self-contained execution utilizes run-time reference information to determine run-time location of configuration information and additional application information based on a location address assigned to the storage device as a result of plugging the storage device into the computer system or computer device.

22. The system of claim 1,

wherein the firmware instructions are configured to prevent completion of an enumeration process with the computer system or computer device if an unhide key is not received by the storage device from the computer system or computer device.

23. The system of claim 1, wherein the authentication by the computer system or computer device comprises (i) authentication of the computer system or computer device, and (ii) authentication of a user of the computer system or computer device.

24. The system of claim 1, further comprising the computer system or computer device,

wherein the computer system or computer device further comprises an attribute and a device driver, the device driver configured with unhide instructions for supplying an unhide key to the storage device,

wherein the device driver or the unhide instructions are locked to the computer system or computer device such that the locked device driver or the unhide instructions cannot be copied to another computer system or computer device, and

wherein the authentication is contingent upon verification of the attribute of the computer system or computer device.

25. The system of claim 1, further comprising the computer system or computer device,

wherein the computer system or computer device is configured to prevent access, by the storage device, to data stored on the computer system or computer device unless the storage device is a storage device that has been specially configured for access to the computer system or computer device.

31. The system of claim 1, wherein the storage device comprises a removable storage device or a storage device connectable to the computer system or computer device by a cable, computer bus, or wirelessly.

9-15. -15. (canceled)

16. A method comprising:

connecting a storage device to a computer system or computer device, the storage device comprising one or more pre-configured applications stored thereon, the pre-configured applications being configured for self-contained execution from the storage device on the computer system or computer device;

permitting access from the computer system or computer device to the storage device upon successful authentication by the computer system or computer device;

preventing access from the computer system or computer device to the storage device absent successful authentication by the computer system or computer device; and

upon permitting access from the computer system or computer device to the storage device, receiving an indication to initiate execution of a launch application for launching one or more of the pre-configured applications for self-contained execution from the storage device;

wherein the self-contained execution from the storage device comprises initiating execution of the pre-configured applications utilizing execution information only from the storage device, and

wherein the preventing access comprises rendering the storage device hidden from the operating system of the computer system or computer device absent successful authentication by the computer system or computer device.

26. The method of claim 16, wherein the self-contained execution utilizes run-time reference information to determine run-time location of configuration information and additional application information based on a location address assigned to the storage device as a result of plugging the storage device into the computer system or computer device.

27. The method of claim 16, further comprising:

preventing completion of an enumeration process with the computer system or computer device if an unhide key is not received by the storage device from the computer system or computer device.

28. The method of claim 16, wherein the authentication by the computer system or computer device comprises (i) authentication of the computer system or computer device, and (ii) authentication of a user of the computer system or computer device.

29. The method of claim 16, wherein the successful authentication by the computer system or computer device is contingent upon verification of an attribute of the computer system or computer device, such that the authentication may be successfully performed by only a particular computer system or computer device, the particular computer system or computer device having the attribute.

30. The method of claim 16, further comprising:

receiving an encrypted unhide key from the computer system or computer device; and

decrypting the unhide key.

17. (canceled)

18. (canceled)

20. (canceled)