Location sensitive solid state drive

• US 8,533,853 B2
• Filed: 06/11/2010
• Issued: 09/10/2013
• Est. Priority Date: 06/12/2009
• Status: Active Grant

• Current Assignee: TeleCommunication Systems Inc (Comtech Telecommunications Corporation)
• Original Assignee: TeleCommunication Systems Inc (Comtech Telecommunications Corporation)
• Inventors: Jones, Roydn, Vancouvering, Ken
• Primary Examiner(s): Zand, Kambiz
• Assistant Examiner(s): WYSZYNSKI, AUBREY H
• Application Number:
  US12/814,180
• Publication Number:
  US 20110138477A1
• Time in Patent Office: 1,187 Days
• Field of Search: 726/27
• US Class Current: 726/27
• CPC Class Codes: G06F 12/0246 in block erasable memory, e.g. flash memory
• CPC Class Codes: G06F 12/1416 by checking the object accessibility, e.g. type of access defined by the memory independently of subject rights G06F12/1458 takes precedence
• CPC Class Codes: G06F 12/1425 the protection being physical, e.g. cell, word, block
• CPC Class Codes: G06F 21/602 Providing cryptographic facilities or services
• CPC Class Codes: G06F 21/78 to assure secure storage of data address-based protection against unauthorised use of memory G06F12/14; record carriers for use with machines and with at least a part designed to carry digital markings G06K19/00
• CPC Class Codes: G06F 2212/1052 Security improvement
• CPC Class Codes: G06F 2212/455 Image or video data
• CPC Class Codes: G06F 2212/7209 Validity control, e.g. using flags, time stamps or sequence numbers
• CPC Class Codes: G06F 2221/2111 Location-sensitive, e.g. geographical location, GPS
• CPC Class Codes: G06F 3/0623 in relation to content
• CPC Class Codes: G06F 3/0653 Monitoring storage devices or systems
• CPC Class Codes: G06F 3/067 Distributed or networked storage systems, e.g. storage area networks [SAN], network attached storage [NAS]
• CPC Class Codes: G06F 3/0679 Non-volatile semiconductor memory device, e.g. flash memory, one time programmable memory [OTP]
• CPC Class Codes: H04L 63/107 wherein the security policies are location-dependent, e.g. entities privileges depend on current location or allowing specific operations only from locally connected terminals
• CPC Class Codes: H04W 12/08 Access security
• CPC Class Codes: H04W 4/025 using location based information parameters

Abstract

A data storage system including a SSD includes a capability to detect whether its location is acceptable for function, and a capability to self-disable in the event the location of the device is unacceptable, or to self-enable only while the location of the device is acceptable.

Claims

1. A data storage device, comprising:

a solid state drive (SSD);

a location sensor to sense a current location of said solid state drive;

a selector to select an encryption key based on said current location;

a disabler to disable said solid state drive when said current location of said solid state drive does not fall within one or more permitted operation locations.

2. The data storage device according to claim 1, wherein:

said location information comprises a satellite-based system.

3. The data storage device according to claim 2, wherein:

said satellite-based system comprises a global navigation satellite system (GNSS) receiver.

4. The data storage device according to claim 3, wherein:

said satellite-based system comprises a global positioning system (GPS) receiver.

5. The data storage device according to claim 4, wherein:

said GPS receiver includes a tuned antenna, a receiver-processor, and a clock.

6. The data storage device according to claim 1, wherein:

said location sensor comprises a terrestrial radio transmitter-based system receiver.

7. The data storage device according to claim 1, wherein:

said location sensor comprises a long range navigation (LORAN) receiver.

8. The data storage device according to claim 1, wherein:

said location sensor comprises an Enhanced LORAN (E-LORAN) receiver.

9. The data storage device according to claim 1, wherein:

said location sensor continually monitors said current location of said solid state drive; and

wherein said solid state drive is programmed to identify said one or more permitted operation locations; and

wherein said solid state drive operates only while its current location matches a permitted operation location.

10. The data storage device according to claim 1, wherein:

said solid state drive self-disables when said current location does not match any of said one or more permitted operation locations.

11. The data storage device according to claim 1, wherein:

said location sensor continually monitors said current location of said solid state drive.

12. The data storage device according to claim 1, wherein:

said solid state drive is programmed to identify one or more permitted operation locations; and

wherein data in said solid state drive is encrypted when said current location does not match any of said permitted operation locations.

13. The data storage device according to claim 1, wherein:

said solid state drive is programmed to identify said one or more permitted operation locations; and

wherein data in said solid state drive is re-encrypted when said current location does not match any of said one or more permitted operation locations.

14. A device comprising the solid state drive according to claim 1, wherein:

said solid state drive self-disables when an attempt is made to bring said solid state drive into operation in a nonpermitted operation location.

15. A device comprising the solid state drive according to claim 1, wherein:

data on said solid state drive can be encrypted when an attempt is made to bring said solid state drive into operation in a nonpermitted operation location.

16. A device comprising the solid state drive according to claim 1, wherein:

said solid state drive is programmable to activate a data erase function when said solid state drive is located in a nonpermitted operation location.

17. A device comprising the solid state drive according to claim 1, wherein:

said solid state drive is programmable to activate at least one of a fast erase function, a secure erase function, and a destructive erase function.

18. A device comprising the solid state drive according to claim 1, wherein:

said solid state drive further comprising video front end capability, whereby said solid state drive can be connected to a source of video input such as a video camera; and

wherein said solid state drive stores video data.

19. The data storage device according to claim 1, further comprising:

a repository for sensitive information.

20. The data storage device according to claim 19, wherein:

said sensitive information comprises information that is compromised when said sensitive information becomes available to unauthorized persons.

21. The data storage device according to claim 19, wherein:

said sensitive information comprises corporate secrets.

22. The data storage device according to claim 19, wherein:

said sensitive information comprises sensitive customer information.

23. The data storage device according to claim 19, wherein:

said sensitive information comprises medical patient data.

24. The data storage device according to claim 1, wherein:

a portable computing device is comprising of said data storage device.

25. A data storage system, comprising:

a solid state drive;

means for sensing a current location of said solid state drive;

means for selecting an encryption key based on said current location;

means for specifying one or more permitted operation locations; and

means for encrypting data in said solid state drive when said current location of said device does not fall within one or more permitted operation locations.