System and method for ensuring security of data stored on electronic computing devices

• US 7,930,755 B1
• Filed: 12/31/2007
• Issued: 04/19/2011
• Est. Priority Date: 11/02/2007
• Status: Expired due to Fees

• Current Assignee: Timothy T. Miller
• Original Assignee: Timothy T. Miller
• Inventors: Miller, Timothy T.
• Primary Examiner(s): Chai; Longbit
• Application Number:
  US11/967,305
• Time in Patent Office: 1,205 Days
• Field of Search: 726/26
• US Class Current: 726/26
• CPC Class Codes: G06F 21/78 to assure secure storage of data address-based protection against unauthorised use of memory G06F12/14; record carriers for use with machines and with at least a part designed to carry digital markings G06K19/00
• CPC Class Codes: G06F 21/88 Detecting or preventing theft or loss
• CPC Class Codes: G06F 2221/2143 Clearing memory, e.g. to prevent the data from being stolen

Abstract

A system and method for using a host electronic computing device to prevent access to data in a preselected memory portion of an electronic computing device remote from the host electronic computing device. Each of the electronic computing devices is adapted for selective electronic communication with the other. The system and method comprises a first software program for the remote device, the first software program comprising a unique identifier, a current expiration time value, a comparator for comparing the current expiration time value against a time-based parameter of the remote device, and a security trigger. The system and method further comprises a second software program for the host device, where the second software program includes means for identifying the remote device, means for accessing an expiration time reset schedule, and means for resetting the current expiration time value.

Claims

1. A method for using a host electronic computing device to prevent access to data in a preselected memory portion of an electronic computing device remote from the host electronic computing device, each of the electronic computing devices adapted for selective electronic communication with the other, comprising the steps of:

providing a self-cannibalizing software program for the remote device, the self-cannibalizing software program comprising a unique identifier, a current expiration time value, a comparator for comparing the current expiration time value against a time-based parameter of the remote device, and a security trigger configured to be activated by the self-cannibalizing software at a preset expiration time;

providing a second software program for the host device, the second software program comprising an identifier and an expiration time reset schedule, including at least a day of a week list, which is stored at the host device and configured to control when the expiration time of the self-cannibalizing software must be reset in order to prevent an automatic launch of the security trigger at the remote device;

establishing an initial current expiration time value in the self-cannibalizing software program by establishing selective electronic communication from the host device to the remote device;

identifying a periodic signal from the remote device by comparing a received identifier signal against the unique identifier;

interrogating the remote device for a status signal from the comparator;

receiving the status signal from the remote device; and

in response to the time-based parameter not exceeding the current expiration time value, sending a signal to the remote device to reset the current time expiration value; and

in response to the time-based parameter exceeding the current expiration time value, launching a data erase program configured to erase or render unrecoverable at least a portion of the data stored in the remote device.

2. The method of claim 1 further comprising the step of:

resetting a current expiration time value using data contained in an expiration time reset schedule.

3. The method of claim 1 further comprising the step of:

triggering a search through electronic data stored on the remote device by selectively sending search criteria from the host device to the remote device.

4. The method of claim 3 further comprising the step of:

receiving search results from the remote device.

5. The method of claim 4 further comprising the step of:

sending an instruction to the remote device in response to having received the search results.

6. The method of claim 1 further comprising the step of:

transferring data from the expiration time reset schedule to the remote device.

7. The method of claim 1 further comprising the steps of:

detecting whether the security trigger has been activated; and

reversing the effects of the security trigger within the remote device.

8. A system for using a host electronic computing device to prevent access to data in a preselected memory portion of an electronic computing device remote from the host electronic computing device, each of the electronic computing devices adapted for selective electronic communication with the other, comprising;

a self-cannibalizing software program for the remote device, the self-cannibalizing software program comprising a unique identifier, a current expiration time value, a comparator for comparing the current expiration time value against a time-based parameter of the remote device, and a security trigger configured to be activated by the self-cannibalizing software at a preset expiration time; and

a second software program for the host device, where the second software program comprises;

means for identifying the remote device via the unique identifier;

means for accessing an expiration time reset schedule, including at least a day of a week list, which is stored at the host device and configured to control when the expiration time of the self-cannibalizing software must be reset in order to prevent an automatic launch of the security trigger at the remote device;

means for resetting the current expiration time value in response to the time-based parameter not exceeding the current expiration time value; and

means for launching a data erase program configured to erase or render unrecoverable at least a portion of the data stored in the remote device in response to the time-based parameter exceeding the current expiration time value.

9. The system of claim 8 wherein:

the self-cannibalizing software program further comprises a security mechanism.

10. The system of claim 9 wherein:

the security trigger is configured to cause the security mechanism to be activated.

11. The system of claim 8 wherein:

the security trigger is configured to cause a security mechanism to be activated within the remote computing device.

12. The system of claim 11 wherein:

the security mechanism, when activated, is configured to prevent access to electronic data on the remote computing device.

13. The system of claim 12 wherein:

the second software program further comprises a means for reversing the effects of the activated security mechanism.

14. The system of claim 11 wherein:

the current expiration time is configured to control when the security trigger activates the security mechanism.

15. The system of claim 8 wherein:

the comparator is configured to send a predetermined signal to the security trigger based on a comparison of the current expiration time value against the time-based parameter of the remote device.

16. The system of claim 15 wherein:

the security trigger is configured to activate a security mechanism within the remote computing device upon receiving the predetermined signal.

17. The system of claim 8 wherein:

the second software program further comprises a means for detecting whether the security trigger of the self-cannibalizing software program has been activated.

18. The system of claim 8 wherein:

the expiration time reset schedule comprises a non-current expiration time.

19. The system of claim 18 wherein:

the means for resetting the current expiration time is configured to cause the current expiration time to be replaced with the non-current expiration time.

20. The system of claim 8 wherein:

the host electronic computing device is a web site.

21. The system of claim 8 wherein:

the second software program further comprises a means for altering the expiration time reset schedule.

22. The system of claim 8 wherein:

the second software program further comprises a means for initiating a search through the electronic data of the remote computing device.

23. The system of claim 22 wherein:

the second software program further comprises a means for monitoring the search and means for displaying search results.

24. The system of claim 23 wherein:

the second software further comprises means for processing the search results.

25. The system of claim 8 wherein:

the self-cannibalizing software program and the second software program are the same software program set in different modes.

26. The system of claim 8 wherein:

the self-cannibalizing software program further comprises a means for monitoring passwords where the password monitor compares the number of incorrect password entries against a predetermined limit and comprises means for sending a signal to the security trigger when the number of password entries exceeds the predetermined limit.

27. The system of claim 8 wherein:

the self-cannibalizing software program further comprises means for detecting when attempts are being made to access and obtain a system password, means for counting the number of made attempts, means for comparing the number of made attempts with a predetermined limit, and means for sending a signal to the security trigger when the number of made attempts passes the predetermined limit.

28. A computer program product embodied in at least one computer-readable storage device for using a host electronic computing device to prevent access to data in a preselected memory portion of an electronic computing device remote from the host electronic computing device, each of the electronic computing devices configured for selective electronic communication with the other, the computer program product comprising;

a self-cannibalizing software program for the remote device, the self-cannibalizing software program comprising a unique identifier, a current expiration time value, a comparator for comparing the current expiration time value against a time-based parameter of the remote device, and a security trigger configured to be activated by the self-cannibalizing software at a preset expiration time; and

a second software program for the host device, where the second software program, when executed by a processor, is configured to perform the functions comprising;

identifying the remote device via the unique identifier;

accessing an expiration time reset schedule, including at least a day of a week list, stored at the host device and configured to control when the expiration time of the self-cannibalizing software must be reset in order to prevent an automatic launch of the security trigger at the remote device;

resetting the current expiration time value in response to the time-based parameter not exceeding the current expiration time value; and

launching a data erase program configured to erase or render unrecoverable at least a portion of the data stored in the remote device in response to the time-based parameter exceeding the current expiration time value.

29. The computer program product of claim 28 wherein:

the security trigger is configured to cause a security mechanism to be activated within the remote computing device.

30. The computer program product of claim 29 wherein:

the current expiration time is configured to control when the security trigger activates the security mechanism.

31. The computer program product of claim 29 wherein the second software program comprises:

means for launching configured to cause the security trigger to activate the security mechanism.

32. The computer program product of claim 28 wherein:

the self-cannibalizing software program further comprises a security mechanism.