Transparent electronic safety deposit box

• US 6,954,753 B1
• Filed: 10/20/1999
• Issued: 10/11/2005
• Est. Priority Date: 10/20/1999
• Status: Expired due to Term

• Current Assignee: Hewlett-Packard Development Company, L.P. (HP Inc.)
• Original Assignee: Hewlett-Packard Development Company, L.P. (HP Inc.)
• Inventors: Jeran, Paul L
• Primary Examiner(s): Rones, Charles
• Assistant Examiner(s): Mahmoudi, Hassan
• Application Number:
  US09/421,919
• Time in Patent Office: 2,183 Days
• Field of Search: 713/1, 713/168, 713/200, 713/201, 713/185, 713/171, 713/172, 705/42, 705/78, 707/10, 707/104.1, 711/113, 711/111, 711/148, 711/153, 709/219, 709/204, 709/225, 709/207
• US Class Current: 1/1
• CPC Class Codes: G06F 16/13 File access structures, e.g. distributed indices arrangements of input from, or output to, record carriers G06F3/06
• CPC Class Codes: G06F 21/6218 to a system of files or objects, e.g. local or distributed file system or database
• CPC Class Codes: G06F 21/6245 Protecting personal data, e.g. for financial or medical purposes
• CPC Class Codes: G06F 21/78 to assure secure storage of data address-based protection against unauthorised use of memory G06F12/14; record carriers for use with machines and with at least a part designed to carry digital markings G06K19/00
• CPC Class Codes: G06F 2221/2115 Third party
• CPC Class Codes: Y10S 707/99931 Database or file accessing
• CPC Class Codes: Y10S 707/99945 Object-oriented database structure processing

Abstract

A secure electronic storage system for digital information administered by a third party and accessible over a communications network. Sensitive information in digital format is stored in a secure database located at a physically remote storage facility which appears to a client computer as a single, peripheral storage device and is transparent to the user. The secure storage facility is treated as a local logical storage device accessible from a user'"'"'s desktop computer thus allowing the storage, retrieval and updating of data files electronically over a communications network such as the internet. Dedicated data storage units identified by a user identification code are maintained in a secure environment and are accessed from a user'"'"'s desktop computer utilizing a standard data file access method for a single peripheral storage device. Encryption and user authorization validation services are also provided.

Claims

1. A secure data storage system, comprising:

a communications network address configured to identify the secure data storage system to a remote computing device communicatively coupled to the secure data storage system via the communications network;

a dedicated data storage unit configured to maintain data files generated by the remote computing device, the dedicated data storage unit identified by an identification code corresponding to the remote computing device; and

a processing component configured to receive and process a request to access the dedicated data storage unit, the request being initiated as a directory path selection displayed such that the dedicated data storage unit appears as a local storage device of the computing device, the directory path specifying the communications network address, the identification code, and a data file maintained with the dedicated data storage unit.

2. A secure data storage system as recited in claim 1, wherein the identification code includes a processor identification code corresponding to the remote computing device.

3. A secure data storage system as recited in claim 1, wherein the identification code includes a user identification code and a processor identification code corresponding to the remote computing device.

4. A secure data storage system as recited in claim 1, wherein the processing component is further configured to grant access to the dedicated data storage unit in accordance with access instructions associated with the identification code.

5. A secure data storage system as recited in claim 1, wherein the processing component is further configured to encrypt the data files in accordance with a security level associated with the identification code.

6. A method, comprising:

maintaining data files with a dedicated data storage unit that is identified by an identification code corresponding to a remote computing device, the dedicated data storage unit having an associated communications network address;

receiving a request to access the dedicated data storage unit, the request being initiated as a directory path selection displayed such that the dedicated data storage unit appears as a local storage device of the remote computing device, the directory path specifying the communications network address, the identification code, and a data file maintained with the dedicated data storage unit; and

granting access for the remote computing device to access the dedicated data storage unit in accordance with access instructions associated with the identification code.

7. A method as recited in claim 6, further comprising generating the identification code to include a processor identification code corresponding to the remote computing device.

8. A method as recited in claim 6, further comprising generating the identification code to include a user identification code and a processor identification code corresponding to the remote computing device.

9. A method as recited in claim 6, further comprising encrypting the data files in accordance with a security level associated with the identification code.

10. A method, comprising;

generating a request to access a logical data storage peripheral that corresponds to a remote secure data storage system which includes a dedicated data storage unit to maintain data files generated by a computing device, the dedicated data storage unit identifiable by an identification code that corresponds to the computing device;

receiving the request to access the logical data storage peripheral, the request being initiated as a directory path selection displayed such that the logical data storage peripheral appears as a local storage device of the computing device, the directory path specifying the logical data storage peripheral, the identification code, and a data file maintained with the dedicated data storage unit;

communicatively coupling the computing device to the remote secure data storage system; and

communicating the request to access the logical data storage peripheral to the remote secure data storage system.

11. A method as recited in claim 10, further comprising generating the identification code to include a processor identification code corresponding to the computing device.

12. A method as recited in claim 10, further comprising generating the identification code to include a user identification code and a processor identification code corresponding to the computing device.

13. In a computer system including at least one client computer coupled by a communications network to a remote secure storage facility located remotely to the client computer, a method of accessing a dedicated data storage unit for storing data files associated with a user identification code in a secure environment, the method comprising:

initiating a request for accessing a dedicated data storage unit of the remote secure storage facility, the request being initiated by selecting a directory path displayed such that the remote secure storage facility appears as a local storage device of the client computer, the directory path specifying at least the remote secure storage facility and a user identification code, the remote secure storage facility associated with an address on the communications network;

in response to the request, automatically connecting to the remote secure storage facility at the associated address;

transmitting the request to the remote secure storage facility;

identifying the dedicated data storage unit associated with the specified user identification code; and

granting access to the identified dedicated data storage unit.

14. The method as in claim 13 wherein the step of granting access includes granting access to the identified dedicated storage unit in accordance with pre-existing instructions associated with the specified user identification code.

15. The method as in claim 13 wherein the request further specifies a processor identification code associated with a client computer, the step of identifying the dedicated data storage unit including identifying the dedicated data storage unit associated with both the specified user identification code and the specified processor identification code.

16. The method as in claim 13 including the further step of displaying to a user a directory of data files stored in the dedicated data storage unit.

17. The method as in claim 16 including the further steps of:

selecting a data file from the displayed directory of data files; and

transmitting the selected data file to a client computer associated with the request.

18. The method as in claim 13 wherein each data file stored in the dedicated data storage unit has a predetermined security level assigned thereto, each data file being encrypted in accordance with its assigned security level.

19. The method as in claim 13 wherein the request further specifies at least one data file stored on the identified dedicated data storage unit, the method further comprising the step of transmitting the specified at least one data file to a client computer associated with the request.

20. The method as in claim 13 wherein each data file stored in the dedicated data storage unit is assigned a reference identification number by the secure storage facility at the time each data file is initially stored in the dedicated data storage unit.

21. The method as in claim 20 wherein each data file stored in the dedicated data storage unit is assigned a new reference identification number by the secure storage facility each time the data file is accessed by a user after being initially stored in the dedicated data storage unit.

22. The method as in claim 13 including the further steps of:

storing one or more data files in the dedicated data storage unit after access has been granted; and

encrypting the data in the one or more data files in accordance with a user assigned security level associated with each data file to be stored.

23. The method as in claim 22 wherein the step of encrypting the data includes the step of encrypting the data at the secure storage facility prior to storing the one or more data files in the dedicated data storage unit.

24. The method as in claim 23 wherein the step of encrypting the data includes the step of encrypting the data at a client computer associated with the request prior to storing the one or more data files in the dedicated data storage unit.

25. In a computer system including at least one client computer coupled by a communications network to a secure storage facility located remotely to the client computer, the remote secure storage facility identified by an address on the communications network and including at least one dedicated data storage unit for storing data files associated with a user identification code in a secure environment, encryption/decryption means and processor means, the remote secure storage facility adapted to allow access to the at least one dedicated data storage unit in accordance with a set of pre-existing instructions, apparatus for accessing the at least one dedicated data storage unit such that the remote secure storage facility is transparent to a client computer, the apparatus comprising:

a logical data storage peripheral coupled to the client computer, the logical data storage peripheral associated with the remote secure storage facility; and

a controller associated with the logical data storage peripheral and storing the address on the communications network of the remote secure storage facility, the controller including machine executed means for;

receiving a request from a user on the client computer to access the logical data storage peripheral, the request being initiated by selecting a directory path displayed such that the remote secure storage facility appears as a local storage device of the client computer, the directory path specifying at least the logical data storage peripheral and a user identification code;

determining the address of the specified secure storage facility;

automatically connecting to the remote secure storage facility;

transmitting the access request to the remote secure storage facility; and

when access to a dedicated data storage unit associated with the specified user identification code has been granted, providing access to the dedicated data storage unit by routing communications between the client computer and the remote secure storage facility, the client computer unaware it is in communication with the remote secure storage facility.

26. Apparatus as in claim 25 further comprising encryption and decryption means for encrypting data files to be stored in a dedicated data storage unit and decrypting data files retrieved from a dedicated data storage unit.

27. Apparatus as in claim 26 wherein a data file to be stored in the dedicated data storage unit associated with a user identification code is encrypted in accordance with a user assigned security level.

28. Apparatus as in claim 25 further comprising memory means for storing at least one directory, each directory containing a listing of data files stored in a dedicated data storage unit.

29. A computing device, comprising:

a logical data storage peripheral corresponding to a remote secure data storage system that includes a dedicated data storage unit configured to maintain data files generated by the computing device, the dedicated data storage unit identified by an identification code corresponding to the computing device;

a controller configured to receive a request to access the logical data storage peripheral, the request being initiated as a directory path selection displayed such that the logical data storage peripheral corresponding to the remote secure data storage system appears as a local storage device of the computing device, the directory path specifying the logical data storage peripheral, the identification code, and a data file maintained with the dedicated data storage unit; and

the controller further configured to communicatively couple the computing device to the remote secure data storage system and communicate the request to access the logical data storage peripheral to the remote secure data storage system.

30. A computing device as recited in claim 29, further comprising a processor configured to execute the controller, and wherein the identification code includes a processor identification code corresponding to the computing device.

31. A computing device as recited in claim 29, further comprising a processor configured to execute the controller, and wherein the identification code includes a user identification code and a processor identification code corresponding to the computing device.

32. A secure storage facility having an address on a communications network and adapted for communication with other devices on the communications network, the secure storage facility comprising:

one or more dedicated data storage units for storing data files in a secure environment, each of the dedicated data storage units identified by at least one user identification code; and

a processor coupled to each of the dedicated data storage units, the processor including machine executed means for;

receiving an access request from a user on a remotely located client computer, the access request being initiated as a directory path selection displayed such that the secure storage facility appears as a local storage device of the client computer, the directory path specifying at least a user identification code;

identifying a dedicated data storage unit associated with the specified user identification code; and

granting access to the identified dedicated data storage unit in accordance with a set of instructions associated with the specified user identification code.

33. A secure storage facility as in claim 32 further comprising encryption and decryption means for encrypting and decrypting data files associated with a user identification code in accordance with the set of instructions associated with the user identification code.

34. A secure storage facility as in claim 33 wherein a data file to be stored in the dedicated data storage unit associated with a user identification code is encrypted in accordance with a user assigned security level.

35. A secure storage facility as in claim 32 wherein the set of instructions associated with a user identification code specifies read-only, write-only or read/write access to data files stored in the dedicated data storage unit associated with that user identification code.