Systems for finding a lost transient storage device

• US 8,881,309 B2
• Filed: 03/04/2008
• Issued: 11/04/2014
• Est. Priority Date: 03/04/2008
• Status: Active Grant

• Current Assignee: Microsoft Technology Licensing LLC (Microsoft Corporation)
• Original Assignee: Microsoft Corporation
• Inventors: Schneider, Janet, Wilson, Emily, Sadovsky, Vladimir, Alexander, Robin
• Primary Examiner(s): Kim, Jung
• Assistant Examiner(s): Shayanfar, Ali
• Application Number:
  US12/042,060
• Publication Number:
  US 20090228991A1
• Time in Patent Office: 2,436 Days
• Field of Search: 726/34, 726/26, 370/252, 455/411
• US Class Current: 726/34
• CPC Class Codes: G06F 11/006 Identification G06F11/2289 takes precedence
• CPC Class Codes: H04L 63/029 Firewall traversal, e.g. tunnelling or, creating pinholes
• CPC Class Codes: H04L 63/0478 applying multiple layers of encryption, e.g. nested tunnels or encrypting the content with a first key and then with at least a second key cryptographic mechanisms or cryptographic arrangements using a plurality of keys or algorithms H04L9/14

Abstract

Processes for identifying and recovering a lost transient storage device are provided. In some processes, information regarding the owner of the device is obtained. The device ownership information may be stored on a remote service with which the device is registered and/or may be stored on the device itself. In one process, the remote service provides the device with customized device-executable code when the device is registered. The device may also contain information regarding trusted systems. The process includes obtaining status information indicating whether a device is lost when the device is connected to a host system. In some processes, the status is determined by a remote service. In other processes, the status is determined by the device. If the device is lost then a device recovery plan is executed. Portions of a device recovery plan may be executed on the remote service, the host system, and/or the device.

Claims

1. A method for identifying and locating a portable storage device that is lost to its owner and that is connected to a host system, the method comprising:

sending, by the portable storage device to a remote service via the host system, identification information that identifies the portable storage device, where the portable storage device, the host system, and the remote service are separate and distinct from each other;

receiving, by the portable storage device from the remote service via the host system in response to the sending, status information;

determining, by the portable storage device based on the received status information, that the portable storage device is lost to its owner; and

executing, in response to the determining, a recovery plan that includes the portable storage device communicating with the remote service via the host system over a secure tunneling channel provided by the host system based, the provided secure tunneling channel based on an application provided to the host system by the remote service, and where the portable storage device is configured for being remotely controlled by the remote service via the host system over the provided secure tunneling channel.

2. The method of claim 1, further comprising receiving, by the portable storage device, information provided by the owner.

3. The method of claim 2, where the owner-provided information comprises unique identification information that identifies the owner or contact information for the owner.

4. The method of claim 1, further comprising:

receiving, by the portable storage device, trusted system information; and

storing the received trusted system information in the portable storage device.

5. The method of claim 1 further comprising receiving, by the portable storage device from the remote service via the host system over the provided secure tunneling channel, device-executable code that is configured for implementing an imbedded application when executed by the portable storage device.

6. The method of claim 1, where executing the recovery plan comprises executing an embedded application stored in the portable storage device.

7. The method of claim 1, where the executing the recovery plan further includes enabling querying for owner information stored in an accessible portion of the portable storage device.

8. The method of claim 1, where the executing the recovery plan further includes initiating an erase operation configured for erasing a portion of data stored in the portable storage device.

9. The method of claim 1, where the executing the recovery plan further includes:

requesting further information from the owner via the host system;

receiving the requested further information; and

providing recovery information to the owner, where an amount and a type of the provided recovery information is based on the received further information.

10. The method of claim 9, where the recovery information comprises contact information for the owner, contact information for a device recovery service, or identification information that identifies the portable storage device.

11. At least one computer storage device storing computer-executable instructions that, when executed by a computing device, cause the computing device to perform actions for identifying and locating a portable storage device that is lost to its owner and that is connected with a host system, the actions comprising:

sending, by the portable storage device to a remote service via the host system, identification information that identifies the portable storage device, where the portable storage device, the host system, and the remote service are separate and distinct from each other;

receiving, by the portable storage device from the remote service via the host system in response to the sending, status information;

determining, by the portable storage device based on the received status information, that the portable storage device is lost to its owner; and

executing, in response to the determining, a recovery plan that includes the portable storage device communicating with the remote service via the host system over a secure tunneling channel provided by the host system, the provided secure tunneling channel based on an application provided to the host system by the remote service, and where the portable storage device is configured for being remotely controlled by the remote service via the host system over the provided secure tunneling channel.

12. The at least one computer storage device of claim 11, where executing the recovery plan comprises executing an embedded application stored in the portable storage device.

13. The at least one computer storage device of claim 11, where the executing the recovery plan further includes enabling querying for owner information stored in an accessible portion of the portable storage device.

14. The at least one computer storage device of claim 11, where the executing the recovery plan further includes initiating an erase operation configured for erasing a portion of data stored in the portable storage device.

15. The at least one computer storage device of claim 11, where the executing the recovery plan further includes:

requesting further information from the owner via the host system;

receiving the requested further information; and

providing recovery information to the owner, where an amount and a type of the provided recovery information is based on the received further information.

16. A system comprising a portable storage device that is lost to its owner and that is connected to a host system, the system configured for performing actions comprising:

sending, to a remote service via the host system, identification information that identifies the portable storage device, where the portable storage device, the host system, and the remote service are separate and distinct from each other; and

receiving, by the portable storage device from the remote service via the host system in response to the sending, status information;

determining, by the portable storage device based on the received status information, that the portable storage device is lost to its owner; and

executing, in response to the determining, a recovery plan that includes the portable storage device communicating with the remote service via the host system over a secure tunneling channel provided by the host system, the provided secure tunneling channel based on an application provided to the host system by the remote service, and where the portable storage device is configured for being remotely controlled by the remote service via the host system over the provided secure tunneling channel.

17. The system of claim 16, where executing the recovery plan comprises executing an embedded application stored in the portable storage device.

18. The system of claim 16, where the executing the recovery plan further includes initiating an erase operation configured for erasing a portion of data stored in the portable storage device.

19. The method of claim 16, where the executing the recovery plan further includes enabling querying for owner information stored in an accessible portion of the portable storage device.

20. The method of claim 16 further comprising receiving, by the portable storage device from the remote service via the host system over the provided secure tunneling channel, device-executable code.