Method and apparatus for erasing data after tampering

• US 7,152,095 B1
• Filed: 03/28/2005
• Issued: 12/19/2006
• Est. Priority Date: 10/06/1998
• Status: Expired due to Fees

• Current Assignee: Ricoh Company Limited
• Original Assignee: Ricoh Company Limited
• Inventors: Motoyama, Tetsuro, Yachida, Masuyoshi
• Primary Examiner(s): Jean, Frantz B.
• Application Number:
  US11/092,148
• Time in Patent Office: 631 Days
• Field of Search: 709/212, 709/220, 709/229, 707/205, 711/161, 711/162
• US Class Current: 709/212
• CPC Class Codes: G06F 11/1417 Boot up procedures
• CPC Class Codes: G06F 11/2015 Redundant power supplies power supply failure G06F1/30
• CPC Class Codes: G06F 16/10 File systems; File servers
• CPC Class Codes: G06F 21/554 involving event detection and direct action
• CPC Class Codes: G06F 21/608 Secure printing
• CPC Class Codes: G06F 21/78 to assure secure storage of data address-based protection against unauthorised use of memory G06F12/14; record carriers for use with machines and with at least a part designed to carry digital markings G06K19/00
• CPC Class Codes: G06F 21/86 Secure or tamper-resistant housings
• CPC Class Codes: G06F 2221/2143 Clearing memory, e.g. to prevent the data from being stolen

Abstract

An approach for storing and maintaining data is disclosed. One or more sensors are provided for detecting unauthorized access to a first non-volatile storage. If unauthorized access to the first non-volatile storage is detected, then the data on the first non-volatile storage is deleted by overwriting the data on the first non-volatile storage with a predetermined value so that the data cannot be recovered. The first non-volatile storage is registered with a registration authority to provide authentication of the data maintained on the first non-volatile storage.

Claims

1. A computer-implemented method for storing and maintaining data, the computer-implemented method comprising:

storing data on a first non-volatile storage device;

storing directory data on the first non-volatile storage device, wherein the directory data includes an expiration date for the data;

storing a copy of the data on a second non-volatile storage device;

storing a copy of the directory data on a second non-volatile storage device;

determining, based at least upon the expiration date contained in the directory data stored on the first non-volatile storage device, whether the data should be deleted from the first non-volatile storage device; and

if the data should be deleted from the first non-volatile storage device, then

deleting both the data and the directory data from the first non-volatile storage device, and

deleting the copy of the data and the copy of the directory data from the second non-volatile storage device.

2. The computer-implemented method as recited in claim 1, wherein the directory data further includes a creation date of the data, a name of a data file containing the data and other file management information.

3. The computer-implemented method as recited in claim 1, further comprising updating the copy of the directory data to indicate the data as a source of the copy of the data.

4. The computer-implemented method as recited in claim 3, wherein updating the copy of the directory data to indicate the data as a source of the copy of the data includes updating the copy of the directory data to refer to the first non-volatile storage device and the directory data.

5. The computer-implemented method as recited in claim 4, further comprising updating the copy of the directory data to include a date at which the copy of the data was stored on the second non-volatile storage device.

6. The computer-implemented method as recited in claim 1, further comprising:

if the data is not to be changed or deleted, then designating the data as read-only data;

determining whether the data is read-only data; and

wherein the step of if the data should be deleted from the first non-volatile storage device includes if the data is determined to not be read-only data and if the data should be deleted from the first non-volatile storage device, then deleting both the data and the directory data from the first non-volatile storage device.

7. A computer-readable storage medium for storing and maintaining data, the computer-readable storage medium carrying instructions which, when processed by one or more processors, cause:

storing data on a first non-volatile storage device;

storing directory data on the first non-volatile storage device, wherein the directory data includes an expiration date for the data;

storing a copy of the data on a second non-volatile storage device;

storing a copy of the directory data on a second non-volatile storage device;

determining, based at least upon the expiration date contained in the directory data stored on the first non-volatile storage device, whether the data should be deleted from the first non-volatile storage device; and

if the data should be deleted from the first non-volatile storage device, then

deleting both the data and the directory data from the first non-volatile storage device, and

deleting the copy of the data and the copy of the directory data from the second non-volatile storage device.

8. The computer-readable storage medium as recited in claim 7, wherein the directory data further includes a creation date of the data, a name of a data file containing the data and other file management information.

9. The computer-readable storage medium as recited in claim 7, further comprising one or more additional instructions which, when processed by the one or more processors, causes updating the copy of the directory data to indicate the data as a source of the copy of the data.

10. The computer-readable storage medium as recited in claim 9, wherein updating the copy of the directory data to indicate the data as a source of the copy of the data includes updating the copy of the directory data to refer to the first non-volatile storage device and the directory data.

11. The computer-readable storage medium as recited in claim 10, further comprising one or more additional instructions which, when processed by the one or more processors, causes updating the copy of the directory data to include a date at which the copy of the data was stored on the second non-volatile storage device.

12. The computer-readable storage medium as recited in claim 7, further comprising one or more additional instructions which, when processed by the one or more processors, causes:

if the data is not to be changed or deleted, then designating the data as read-only data;

determining whether the data is read-only data; and

wherein the step of if the data should be deleted from the first non-volatile storage device includes if the data is determined to not be read-only data and if the data should be deleted from the first non-volatile storage device, then deleting both the data and the directory data from the first non-volatile storage device.

13. An apparatus for storing and maintaining data, the apparatus being configured to:

store data on a first non-volatile storage device;

store directory data on the first non-volatile storage device, wherein the directory data includes an expiration date for the data;

store a copy of the data on a second non-volatile storage device;

store a copy of the directory data on a second non-volatile storage device;

determine, based at least upon the expiration date contained in the directory data stored on the first non-volatile storage device, whether the data should be deleted from the first non-volatile storage device; and

if the data should be deleted from the first non-volatile storage device, then

delete both the data and the directory data from the first non-volatile storage device, and

delete the copy of the data and the copy of the directory data from the second non-volatile storage device.

14. The apparatus as recited in claim 13, wherein the directory data further includes a creation date of the data, a name of a data file containing the data and other file management information.

15. The apparatus as recited in claim 13, wherein the apparatus is further configured to update the copy of the directory data to indicate the data as a source of the copy of the data.

16. The apparatus as recited in claim 15, wherein updating the copy of the directory data to indicate the data as a source of the copy of the data includes updating the copy of the directory data to refer to the first non-volatile storage device and the directory data.

17. The apparatus as recited in claim 16, wherein the apparatus is further configured to update the copy of the directory data to include a date at which the copy of the data was stored on the second non-volatile storage device.

18. The apparatus as recited in claim 13, wherein the apparatus is further configured to:

if the data is not to be changed or deleted, then designating the data as read-only data;

determining whether the data is read-only data; and

wherein the step of if the data should be deleted from the first non-volatile storage device includes if the data is determined to not be read-only data and if the data should be deleted from the first non-volatile storage device, then deleting both the data and the directory data from the first non-volatile storage device.