Secure, networked portable storage device

• US 9,069,933 B1
• Filed: 05/25/2007
• Issued: 06/30/2015
• Est. Priority Date: 09/28/2005
• Status: Expired due to Fees

• Current Assignee: Visible Assets Incorporated (NOV, Inc.)
• Original Assignee: Visible Assets Incorporated (NOV, Inc.)
• Inventors: August, Jason, Stevens, John, Waterhouse, Paul
• Primary Examiner(s): MOORTHY, ARAVIND K
• Application Number:
  US11/754,261
• Time in Patent Office: 2,958 Days
• Field of Search: 726/26, 726/34, 713/165
• US Class Current: 1/1
• CPC Class Codes: G06F 21/10 Protecting distributed programs or content, e.g. vending or licensing of copyrighted material protection in video systems or pay television H04N7/16 ; Digital rights management [DRM]
• CPC Class Codes: G06F 21/6218 to a system of files or objects, e.g. local or distributed file system or database
• CPC Class Codes: G06F 21/79 in semiconductor storage media, e.g. directly-addressable memories
• CPC Class Codes: G06F 21/86 Secure or tamper-resistant housings
• CPC Class Codes: G06F 21/88 Detecting or preventing theft or loss
• CPC Class Codes: G06F 2221/2111 Location-sensitive, e.g. geographical location, GPS
• CPC Class Codes: G11B 20/00086 Circuits for prevention of unauthorised reproduction or copying, e.g. piracy indicating unauthorised use of record carriers in general G11B23/28; scrambling for television signal recording H04N5/913; network architectures or network protocols for network security H04L63/00; cryptographic mechanisms or cryptographic arrangements for secret or secure communication H04L9/00
• CPC Class Codes: H04W 64/003 locating network equipment
• CPC Class Codes: Y04S 40/20 Information technology specific aspects, e.g. CAD, simulation, modelling, system security

Abstract

A secure, networked portable storage device includes: a secure data storage section; a program storage section including a security program operatively connected to the secure data storage section, wherein the security program is operable to selectively enable and disable access to the secure data storage section; a device antenna operable at a low radio frequency not exceeding one megahertz; a transceiver operatively connected to the device antenna, the transceiver operable to receive radio signals at the low radio frequency and generate data signals at the said low radio frequency, in response thereto; a programmable microprocessor operatively coupled with the transceiver and the program storage section, the microprocessor configured for controlling operation of the program storage section and to cause the transceiver to emit an identification signal; and a connector for enabling an electrical connection between the portable storage device and another device, wherein the connector and the secure data storage section are not operatively connected.

Claims

1. A portable data storage device comprising:

a secure data storage section;

a program storage section comprising a security program operatively connected to the secure data storage section, wherein the security program is operable to selectively enable and disable access to the secure data storage section;

a device antenna operable at a low frequency not exceeding one megahertz;

a transceiver operatively connected to the device antenna, the transceiver operable to receive radio signals at the low radio frequency and generate data signals at the said low radio frequency, in response thereto;

a programmable microprocessor operatively coupled with the transceiver and the program storage section, the microprocessor configured for controlling operation of the program storage section and to cause the transceiver to emit an identification signal;

a connector for enabling an electrical connection between the portable device and another device, wherein the connector and the secure data storage section are not operatively connected; and

a heat-generating device for causing erasure of data in the data storage section and wherein the microprocessor is further configured for actuating the heat-generating device in response to receiving an erase signal.

2. The portable device of claim 1, wherein the low radio frequency does not exceed 300 kilohertz.

3. The portable device of claim 2, wherein some of the signals are transmitted at a low radio frequency not exceeding 180 kilohertz.

4. The portable device of claim 1, further comprising an identification storage section operatively connected to the program storage section, the identification storage section comprising identification data about the portable device, the identification data comprising a unique identifier associated with said portable device.

5. The portable device of claim 4, wherein the identification data comprises an internet protocol address, and wherein the microprocessor is operable for communication with an internet router using said internet protocol address, such that at least a portion of the identification data can be transmitted through the internet router to be viewable through a web browser at a remote location.

6. The portable device of claim 4 wherein the identification data is inserted by the microprocessor upon receipt of a directive sent as a signal from a trusted source.

7. The portable device of claim 6 further comprising an additional energy maintained in sleep mode until activated by the microprocessor and when activated, said additional energy source causes erasure of data in the secure data storage section.

8. The portable device of claim 4 wherein the portable device is networked and the identification storage section further comprises network identification data.

9. The portable device of claim 8 wherein the portable device is operable to transmit and receive signals from other portable devices within its network.

10. The portable device of claim 1 wherein the transceiver is operable to emit a warning signal when the portable device is being removed from a protected region.

11. The portable device of claim 1 further comprising an energy source.

12. The portable device of claim 1 wherein the security program is embodied as an application specific integrated circuit.

13. The portable device of claim 1 wherein the security program is embodied within the microprocessor.

14. The portable device of claim 1 wherein the security program is disposed within the secure data storage section.

15. The portable device of claim 1 wherein the secure data storage section is an electrically erasable programmable read-only memory device.

16. The portable device of claim 1 wherein the connector is based on a USB standard.

17. The portable device of claim 1 further comprising a timing device operatively connected to the transceiver, the timing device operable to activate said transceiver at selected time intervals.

18. The portable device of claim 1 wherein the heat-generating device is detonated by a signal from the microprocessor, said signal transmitted if the portable device is removed from the protected region.

19. A method for monitoring and securing data in a portable data storage device within a protected region, the method comprising the steps of:

configuring a signal generating system within the protected region, the signal generating system comprising at least one field antenna and a base station operable to generate a low frequency radio signal not exceeding one megahertz;

configuring the portable storage device with a low frequency transceiver, an antenna operable at said low frequency, and a securing program for secure use within the protected region;

monitoring the portable storage device within the protected region;

enabling user access to the data in the portable storage device when the portable storage device is within the protected region; and

restricting user access to the data in the portable storage device when the portable device leaves the protected region.

20. The method of claim 19 wherein configuring the signal generating system comprises installing a portal comprising the base station, a loop antenna, and a processor.

21. The method of claim 20 wherein the step of restricting user access comprises the portal emitting a warning when the portable storage device is in close proximity to the portal.

22. The method of claim 19 wherein restricting user access comprises at least one action selected from a group consisting of:

erasing data, destroying the secure data storage section, changing a security code, destroying a decryption key, powering down the portable storage device and placing the portable storage device in sleep mode.

23. The method of claim 22 wherein configuring the portable device comprises loading an encryption/decryption program in the device, along with a key, and restricting user access further comprises transmission of a signal to the microprocessor causing said microprocessor to destroy the key.

24. The method of claim 22 wherein restricting user access comprises requiring the user to provide a security code transmitted by the base station and changing said security code if the portable device is removed from the protected region.

25. The method of claim 24 wherein the security code is updated periodically and wherein the updated security code is transmitted to the portable device only if the portable device is within the protected region.

26. The method of claim 19 wherein configuring the portable storage device further comprises installing a heat-generating device in the portable storage device, said heat-generating device operable by the microprocessor, wherein the erasure of the data in the portable storage device is accomplished by activating the heat-generating device to release energy sufficient to destroy the data, and wherein the heat-generated device is activated when the portable storage device is removed from the protected region.

27. The method of claim 26 wherein the heat-generating device is activated by the microprocessor to emit a high voltage electro magnetic signal causing erasure of the data in the portable storage device when the portable storage device is removed from the protected region.

28. The method of claim 19 wherein the base station transmits interrogation signals to the portable storage device and waits for a timely response from the portable storage device, and wherein user access to the portable storage device is restricted when the timely response is not received from the portable device.

29. The method of claim 28 wherein the interrogation signals are transmitted periodically.

30. The method of claim 19 further comprising transmitting interrogation signals to the portable storage device with the at least one field antenna.

31. The method of claim 19 further comprising using the portable storage device for transmitting identification signals to the base station at timed intervals and if the base station fails to receive an identification signal at the timed interval, the base station transmits a signal restricting access to the data.

32. The method of claim 19 wherein the portable storage device is configured to emit a warning signal when it is removed from the protected region.

33. The method of claim 19 wherein configuring the protected region comprises a step of delineating a secure perimeter of the protected region by placing the at least one field antenna around the protected region.

34. The method of claim 33 further comprising a step of expanding the secure perimeter of the protected region by adding an additional field antenna and an additional base station.

35. The method of claim 19 wherein configuring the portable device further comprises installing a battery in the portable device, said battery in a sleep state until activated by the microprocessor, wherein activating the battery causes a release of energy, the energy destroying the data.

36. The method of claim 35 wherein configuring the portable storage device comprises installing a squib device and wherein the battery activates the squib device, said squib device releasing heat to destroy the data.

37. The method of claim 19, further comprising a step of locating the portable storage device by using global positioning system signals.

38. The method of claim 19, wherein configuring the portable storage device comprises installing a timing device and setting the portable storage device to go into a sleep mode after a predetermined interval of time unless a “

power on”

signal is received from the base station.